NVIDIA GPU Display Driver (Windows nvlddmkm.sys + Linux nvidia.ko): Out-of-bounds array access in the escape handler
CVE-2021-1094NVIDIA / GPU stackcurated
Impact
Out-of-bounds array access in the escape handler on Windows and Linux, giving disclosure or a crash from unprivileged local code.
Who can reach it
Any local user or GPU container with device access.
What to do
Install the fixed GPU Display Driver branch on both Windows and Linux nodes. The kernel component (nvlddmkm.sys / nvidia.ko) cannot be hot-swapped under load, so this is a node drain and reboot per host; restart the container runtime afterwards so mounted driver libraries match the kernel module. No VBIOS or BMC flash.
References
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.