NVIDIA GPU Display Driver (Windows nvlddmkm.sys + Linux nvidia.ko): Reference-count mishandling on a driver resource

Impact

Reference-count mishandling on a driver resource in the R450 and R460 branches. Refcount bugs of this shape typically become use-after-free with effort; NVIDIA rates the confirmed impact as denial of service.

Who can reach it

Any local user or GPU container with device access.

What to do

Install the fixed GPU Display Driver branch on both Windows and Linux nodes. The kernel component (nvlddmkm.sys / nvidia.ko) cannot be hot-swapped under load, so this is a node drain and reboot per host; restart the container runtime afterwards so mounted driver libraries match the kernel module. No VBIOS or BMC flash.

References

Related entries

• NVIDIA GPU Display Driver (Windows nvlddmkm.sys + Linux nvidia.ko): Out-of-bounds array access in the escape handlerCVE-2021-1094 · NVIDIA GPU Display Driver (Windows nvlddmkm.sys + Linux nvidia.ko)Medium
• NVIDIA GPU Display Driver (Windows nvlddmkm.sys + Linux nvidia.ko): Improper validation of a user-supplied pointerCVE-2021-1053 · NVIDIA GPU Display Driver (Windows nvlddmkm.sys + Linux nvidia.ko)Medium
• NVIDIA GPU Display Driver (Windows nvlddmkm.sys + Linux nvidia.ko): All control calls with embedded parametersCVE-2021-1095 · NVIDIA GPU Display Driver (Windows nvlddmkm.sys + Linux nvidia.ko)Medium
• NVIDIA GPU Display Driver (Windows nvlddmkm.sys + Linux nvidia.ko): NULL dereference in the kernel-mode layer reachableCVE-2018-6249 · NVIDIA GPU Display Driver (Windows nvlddmkm.sys + Linux nvidia.ko)High
• NVIDIA GPU Display Driver (Windows nvlddmkm.sys + Linux nvidia.ko): User-mode clients can reach legacy privileged APIsCVE-2021-1052 · NVIDIA GPU Display Driver (Windows nvlddmkm.sys + Linux nvidia.ko)High
• NVIDIA GPU Display Driver (Windows nvlddmkm.sys + Linux nvidia.ko): Out-of-bounds read or write in the kernel-modeCVE-2021-1090 · NVIDIA GPU Display Driver (Windows nvlddmkm.sys + Linux nvidia.ko)High