NVIDIA vGPU Manager (vGPU plugin): Parameters stay writable by the guest after the plugin has validated them - a

CVSS 7.8CVE-2020-5987NVIDIA / GPU stackcurated

Impact

Parameters stay writable by the guest after the plugin has validated them - a textbook double-fetch. The guest passes validation with benign values then swaps them, feeding invalid parameters into host handlers. Escalation on the hypervisor host. vGPU 8.x before 8.5, 10.x before 10.4, and 11.0.

Who can reach it

Any unprivileged user inside a guest VM with a vGPU who can race the host's validation window.

What to do

Upgrade the vGPU Manager on the hypervisor host to the fixed vGPU release. The host component is a kernel module inside the hypervisor, so this is a full node drain: evacuate or power off every tenant VM on the host, upgrade, reboot the host. Guest drivers must be kept within the supported version skew and updated per VM (guest reboot). No VBIOS flash, but expect a maintenance window per host and a matching hypervisor-vendor package (VMware/Citrix/KVM/Nutanix builds ship separately).

References

https://nvd.nist.gov/vuln/detail/CVE-2020-5987

Related entries

All NVIDIA / GPU stack entries

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.