NVIDIA GPU Display Driver - kernel mode layer (Windows nvlddmkm.sys and Linux nvidia.ko): An out-of-bounds write

Impact

An out-of-bounds write in the driver's ECC layer, reachable by an unprivileged user, corrupts state and crashes the node. Relevant because ECC handling is the layer operators lean on for memory integrity on Tesla parts. Both the Windows and Linux datacenter drivers are affected, so a mixed fleet needs two separate rollouts.

Who can reach it

Local and unprivileged on either OS. On Linux it is reachable from any GPU container via /dev/nvidia*; on Windows from any session holding a GPU handle.

What to do

Upgrade both the Linux and the Windows datacenter driver branches listed in bulletin 5353. Cost: Linux needs a drain and nvidia.ko reload per node; Windows needs a reboot per node. Two change windows unless your fleet is homogeneous.

References