NVIDIA Windows GPU Display Driver (nvlddmkm.sys): A securely loaded system DLL then loads its own dependencies
CVE-2020-5980NVIDIA / GPU stackcurated
Impact
A securely loaded system DLL then loads its own dependencies insecurely - the fix for one preloading bug leaving a second-order one behind. Local user gets code execution in a privileged driver component.
Who can reach it
Local user with write access on the dependency search path.
What to do
Install the fixed Windows GPU Display Driver branch listed in the NVIDIA bulletin. nvlddmkm.sys is a kernel driver: the swap needs a host reboot, so on a Windows GPU node this is a drain-and-reboot, not a live driver reload. No VBIOS or BMC flash involved.
References
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.