NVIDIA GPU Display Driver for Windows, nvidia-smi: nvidia-smi loads DLLs from an uncontrolled path

Impact

nvidia-smi loads DLLs from an uncontrolled path. nvidia-smi is run by monitoring agents, schedulers and health checks, usually as a privileged service and often on a timer - so an unprivileged user who can plant a DLL gets scheduled code execution as that service on every GPU node running the same monitoring stack.

Who can reach it

Any local user who can write to a directory on nvidia-smi's DLL search path on a Windows GPU host.

What to do

Install the fixed Windows GPU Display Driver branch listed in the NVIDIA bulletin. nvlddmkm.sys is a kernel driver: the swap needs a host reboot, so on a Windows GPU node this is a drain-and-reboot, not a live driver reload. No VBIOS or BMC flash involved.

References

Related entries

• NVIDIA vGPU Manager (vGPU plugin): The vGPU Manager trusts a length field in a guest request that does not match theCVE-2021-1097 · NVIDIA vGPU Manager (vGPU plugin)High
• NVIDIA vGPU Manager (vGPU plugin): The vGPU Manager fails to release resources on guest driver unload, and the guestCVE-2021-1098 · NVIDIA vGPU Manager (vGPU plugin)High
• NVIDIA vGPU Manager (vGPU plugin): The guest OS can execute privileged operations through the vGPU Manager, whichCVE-2021-1118 · NVIDIA vGPU Manager (vGPU plugin)High
• NVIDIA DCGM (nv-hostengine, DIAG module): Any local user can inject a shared library into the DCGM serverCVE-2021-34398 · NVIDIA DCGM (nv-hostengine, DIAG module)High
• Linux kernel amdgpu display core (DC/DM) (drm/amd/display): An out-of-bounds access in the amdgpu display core (DC/DM)CVE-2021-47046 · Linux kernel amdgpu display core (DC/DM) (drm/amd/display)High
• habanalabs kernel driver (gaudi_memset_device_memory): Use-after-free in the Gaudi device-memory memset pathCVE-2021-47081 · habanalabs kernel driver (gaudi_memset_device_memory)High