NVIDIA Windows GPU Display Driver (nvlddmkm.sys): Missing authorization check in the escape handler

CVSS 5.5CVE-2021-1054NVIDIA / GPU stackcurated

Impact

Missing authorization check in the escape handler - an unprivileged caller performs an action the driver should have refused, resulting in denial of service.

Who can reach it

Any local user with GPU device access.

What to do

Install the fixed Windows GPU Display Driver branch listed in the NVIDIA bulletin. nvlddmkm.sys is a kernel driver: the swap needs a host reboot, so on a Windows GPU node this is a drain-and-reboot, not a live driver reload. No VBIOS or BMC flash involved.

References

https://nvd.nist.gov/vuln/detail/CVE-2021-1054

Related entries

NVIDIA Windows GPU Display Driver (nvlddmkm.sys): NULL dereference in nvlddmkm.sys leading to a system crashCVE-2021-1078 · NVIDIA Windows GPU Display Driver (nvlddmkm.sys)Medium
NVIDIA Windows GPU Display Driver (nvlddmkm.sys): NULL dereference in the escape handler causing a system crashCVE-2021-1096 · NVIDIA Windows GPU Display Driver (nvlddmkm.sys)Medium
NVIDIA Windows GPU Display Driver (nvlddmkm.sys): A NULL pointer created in user-mode code is dereferencedCVE-2021-1116 · NVIDIA Windows GPU Display Driver (nvlddmkm.sys)Medium
NVIDIA Windows GPU Display Driver (nvlddmkm.sys): Improper access control in the escape handler leaks informationCVE-2021-1055 · NVIDIA Windows GPU Display Driver (nvlddmkm.sys)Medium
NVIDIA Windows GPU Display Driver (nvlddmkm.sys): Improper input validation in the escape handler under specificCVE-2021-1117 · NVIDIA Windows GPU Display Driver (nvlddmkm.sys)Medium
NVIDIA Windows GPU Display Driver (nvlddmkm.sys): No rate limiting in the kernel-mode scheduler: a local process floodsCVE-2020-5982 · NVIDIA Windows GPU Display Driver (nvlddmkm.sys)Medium

All NVIDIA / GPU stack entries

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.