NVIDIA vGPU Manager (vGPU plugin + host kernel module): The host can be made to write outside the frame-buffer region
Impact
The host can be made to write outside the frame-buffer region allocated to a guest. That is a direct breach of the vGPU frame-buffer partition - one tenant's writes landing in memory belonging to the host or another tenant's vGPU. vGPU 8.x before 8.5, 10.x before 10.4, and 11.0.
Who can reach it
Any unprivileged user inside a guest VM with a vGPU on the affected host.
What to do
Upgrade the vGPU Manager on the hypervisor host to the fixed vGPU release. The host component is a kernel module inside the hypervisor, so this is a full node drain: evacuate or power off every tenant VM on the host, upgrade, reboot the host. Guest drivers must be kept within the supported version skew and updated per VM (guest reboot). No VBIOS flash, but expect a maintenance window per host and a matching hypervisor-vendor package (VMware/Citrix/KVM/Nutanix builds ship separately).
References
Related entries
- NVIDIA vGPU Manager (vGPU plugin): Guest-supplied length not validated, allowing host-side data tampering or aCVE-2020-5985 · NVIDIA vGPU Manager (vGPU plugin)High
- NVIDIA vGPU Manager (vGPU plugin): Double free in the vGPU plugin, guest-triggered. Host heap corruption or disclosure.CVE-2020-5988 · NVIDIA vGPU Manager (vGPU plugin)High
- NVIDIA Linux GPU Display Driver (nvidia.ko): Nvidia.ko does not fully honour filesystem permissions when providing GPUCVE-2021-1056 · NVIDIA Linux GPU Display Driver (nvidia.ko)High
- NVIDIA vGPU software (guest kernel-mode driver + vGPU plugin): Unvalidated input size across the guest kernel-modeCVE-2021-1058 · NVIDIA vGPU software (guest kernel-mode driver + vGPU plugin)High
- NVIDIA vGPU software (guest kernel-mode driver + vGPU plugin): Unvalidated index across the guest driver and vGPUCVE-2021-1060 · NVIDIA vGPU software (guest kernel-mode driver + vGPU plugin)High
- NVIDIA vGPU Manager (vGPU plugin): Unvalidated guest-supplied length in the vGPU pluginCVE-2021-1062 · NVIDIA vGPU Manager (vGPU plugin)High
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.