NVIDIA GPU Display Driver - Windows DirectX 11 user mode driver (nvwgf2um.dll / nvwgf2umx.dll): MULTI-TENANT ISOLATION

Impact

MULTI-TENANT ISOLATION: A crafted shader causes an out-of-bounds write in the DX11 user mode driver, reaching code execution with a changed scope. NVIDIA scores it AV:Network with no privileges required, which is the signature of a shader delivered over a remote rendering or browser path rather than by a local user. For a cloud-gaming, VDI or remote-workstation operator this is the bug in the 2022 set that actually crosses a customer boundary.

Who can reach it

Network, no privileges. The attacker supplies a shader that the victim's GPU compiles and runs - via a web page, a streamed application, or a shared render pipeline. On a multi-session Windows host this reaches other users' sessions.

What to do

Install the fixed Windows driver from bulletin 5353. Cost: node reboot after driver replacement, so drain sessions. Until patched, the only real compensating control is not accepting untrusted shader input, which is not an option for a cloud-gaming or remote-workstation product.

References