NVIDIA vGPU Manager (vGPU plugin): MULTI-TENANT ISOLATION: stack buffer overflow in the vGPU Manager with enough

Impact

MULTI-TENANT ISOLATION: stack buffer overflow in the vGPU Manager with enough control for a guest to place a ROP chain on the host stack. This is the most explicitly weaponisable of the 2021 vGPU set - guest-to-host code execution on the hypervisor. vGPU 12.x before 12.3, 11.x before 11.5, 8.x before 8.8.

Who can reach it

Any unprivileged user inside a guest VM with a vGPU on the affected host.

What to do

Upgrade the vGPU Manager on the hypervisor host to the fixed vGPU release. The host component is a kernel module inside the hypervisor, so this is a full node drain: evacuate or power off every tenant VM on the host, upgrade, reboot the host. Guest drivers must be kept within the supported version skew and updated per VM (guest reboot). No VBIOS flash, but expect a maintenance window per host and a matching hypervisor-vendor package (VMware/Citrix/KVM/Nutanix builds ship separately).

References