NVIDIA vGPU Manager (vGPU plugin): Unvalidated offset produces a buffer overread in the host plugin. A tenant reads

Impact

Unvalidated offset produces a buffer overread in the host plugin. A tenant reads host memory past the intended buffer - the direct path to another tenant's data. vGPU 8.x before 8.6, 11.0 before 11.3.

Who can reach it

Any unprivileged user inside a guest VM with a vGPU.

What to do

Upgrade the vGPU Manager on the hypervisor host to the fixed vGPU release. The host component is a kernel module inside the hypervisor, so this is a full node drain: evacuate or power off every tenant VM on the host, upgrade, reboot the host. Guest drivers must be kept within the supported version skew and updated per VM (guest reboot). No VBIOS flash, but expect a maintenance window per host and a matching hypervisor-vendor package (VMware/Citrix/KVM/Nutanix builds ship separately).

References

Related entries

• NVIDIA vGPU Manager (vGPU plugin): Unvalidated guest input in the vGPU Manager plugin giving host informationCVE-2021-1080 · NVIDIA vGPU Manager (vGPU plugin)High
• NVIDIA vGPU Manager (vGPU plugin): Unvalidated input length in the vGPU Manager plugin, yielding host disclosureCVE-2021-1082 · NVIDIA vGPU Manager (vGPU plugin)High
• NVIDIA vGPU Manager (vGPU plugin): The vGPU Manager trusts a length field in a guest request that does not match theCVE-2021-1097 · NVIDIA vGPU Manager (vGPU plugin)High
• NVIDIA vGPU Manager (vGPU plugin): The vGPU Manager fails to release resources on guest driver unload, and the guestCVE-2021-1098 · NVIDIA vGPU Manager (vGPU plugin)High
• NVIDIA vGPU Manager (vGPU plugin): The guest OS can execute privileged operations through the vGPU Manager, whichCVE-2021-1118 · NVIDIA vGPU Manager (vGPU plugin)High
• NVIDIA vGPU Manager (vGPU plugin): The guest can write to a shared memory location after the host has validated itsCVE-2021-1085 · NVIDIA vGPU Manager (vGPU plugin)High