NVIDIA vGPU Manager kernel module (nvidia.ko, host): One vGPU can starve the other vGPUs hosted on the same physical
Impact
One vGPU can starve the other vGPUs hosted on the same physical GPU of resources. This is the noisy-neighbour problem as a security bug: a tenant deliberately degrades every co-tenant on the card, and nothing in the vGPU scheduler stops them.
Who can reach it
Any user inside a guest VM sharing a physical GPU with other tenants.
What to do
Upgrade the vGPU Manager on the hypervisor host to the fixed vGPU release. The host component is a kernel module inside the hypervisor, so this is a full node drain: evacuate or power off every tenant VM on the host, upgrade, reboot the host. Guest drivers must be kept within the supported version skew and updated per VM (guest reboot). No VBIOS flash, but expect a maintenance window per host and a matching hypervisor-vendor package (VMware/Citrix/KVM/Nutanix builds ship separately).
References
Related entries
- NVIDIA vGPU Manager kernel module (nvidia.ko, host): The host vGPU kernel module dereferences an unvalidated user-spaceCVE-2021-1100 · NVIDIA vGPU Manager kernel module (nvidia.ko, host)Medium
- NVIDIA vGPU Manager kernel module (nvidia.ko, host): NULL dereference in the host-side nvidia.ko under the vGPUCVE-2020-5960 · NVIDIA vGPU Manager kernel module (nvidia.ko, host)Medium
- NVIDIA vGPU Manager (vGPU plugin): Guest-reachable NULL dereference in the vGPU plugin causing denial of service acrossCVE-2021-1122 · NVIDIA vGPU Manager (vGPU plugin)Medium
- NVIDIA vGPU Manager (vGPU plugin): A guest can deadlock the vGPU plugin. A hung plugin does not crash-and-restartCVE-2021-1123 · NVIDIA vGPU Manager (vGPU plugin)Medium
- Linux kernel amdgpu power management (SMU/powerplay) (drm/amd/pm): A memory or reference-count leak in the amdgpu powerCVE-2021-4453 · Linux kernel amdgpu power management (SMU/powerplay) (drm/amd/pm)Medium
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A memory or reference-count leak in the amdgpu display coreCVE-2021-47042 · Linux kernel amdgpu display core (DC/DM) (drm/amd/display)Medium
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.