NVIDIA vGPU Manager (vGPU plugin): The vGPU Manager fails to release resources on guest driver unload, and the guest
Impact
The vGPU Manager fails to release resources on guest driver unload, and the guest can then reuse them. A tenant that unloads and reloads its driver operates on stale host resources - potentially ones now belonging to another tenant. vGPU 12.x before 12.3, 11.x before 11.5, 8.x before 8.8.
Who can reach it
Any user inside a guest VM who can unload and reload the vGPU guest driver, which requires only admin inside their own VM.
What to do
Upgrade the vGPU Manager on the hypervisor host to the fixed vGPU release. The host component is a kernel module inside the hypervisor, so this is a full node drain: evacuate or power off every tenant VM on the host, upgrade, reboot the host. Guest drivers must be kept within the supported version skew and updated per VM (guest reboot). No VBIOS flash, but expect a maintenance window per host and a matching hypervisor-vendor package (VMware/Citrix/KVM/Nutanix builds ship separately).
References
Related entries
- NVIDIA vGPU Manager (vGPU plugin): The guest OS can execute privileged operations through the vGPU Manager, whichCVE-2021-1118 · NVIDIA vGPU Manager (vGPU plugin)High
- NVIDIA vGPU Manager (vGPU plugin): The guest can write to a shared memory location after the host has validated itsCVE-2021-1085 · NVIDIA vGPU Manager (vGPU plugin)High
- NVIDIA vGPU Manager (vGPU plugin): The vGPU Manager grants a guest access to memory the guest does not own. That is theCVE-2019-5697 · NVIDIA vGPU Manager (vGPU plugin)High
- NVIDIA vGPU Manager (vGPU plugin): Guest-supplied data size is not validated, letting a tenant tamper with host-sideCVE-2020-5970 · NVIDIA vGPU Manager (vGPU plugin)High
- NVIDIA vGPU Manager (vGPU plugin): Uninitialised local pointers later freed in the vGPU plugin - a guest-triggered freeCVE-2020-5972 · NVIDIA vGPU Manager (vGPU plugin)High
- NVIDIA vGPU Manager (vGPU plugin): Guest-supplied length not validated, allowing host-side data tampering or aCVE-2020-5985 · NVIDIA vGPU Manager (vGPU plugin)High
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.