NVIDIA Windows GPU Display Driver (nvlddmkm.sys): Hard-link attack: an unprivileged user makes the driver overwrite
CVE-2021-1091NVIDIA / GPU stackcurated
Impact
Hard-link attack: an unprivileged user makes the driver overwrite a file that needs elevated privilege to modify. Arbitrary privileged file overwrite, which is a well-trodden route to SYSTEM.
Who can reach it
Any local unprivileged user on a Windows GPU host.
What to do
Install the fixed Windows GPU Display Driver branch listed in the NVIDIA bulletin. nvlddmkm.sys is a kernel driver: the swap needs a host reboot, so on a Windows GPU node this is a drain-and-reboot, not a live driver reload. No VBIOS or BMC flash involved.
References
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.