NVIDIA GPU Display Driver - Linux kernel module (nvidia.ko): An optional D-Bus configuration file shipped
Impact
An optional D-Bus configuration file shipped with the Linux driver leaves protected D-Bus endpoints reachable by a basic local user, which chains to code execution and privilege escalation on the host. Everything with a GPU allocation on the node can reach this, because /dev/nvidia* is handed straight into every GPU container by the container toolkit - there is no additional gate between a tenant workload and the driver ioctl surface.
Who can reach it
Local and unprivileged. The attacker needs only to open /dev/nvidiactl and /dev/nvidia<N> and issue ioctls. On a shared node that is any scheduled tenant pod holding a GPU; no host shell, no root, no CAP_SYS_ADMIN.
What to do
Move to the fixed datacenter driver branch named in NVIDIA bulletin 5383. Cost: nvidia.ko cannot be replaced while a process holds a GPU, so this is cordon + drain + module reload per node - stop persistence mode and nv-hostengine/DCGM first or the unload fails. With the GPU Operator it is a rolling node upgrade. No VBIOS, BMC or SBIOS flash needed.
References
Related entries
- NVIDIA GPU Display Driver - Linux kernel module (nvidia.ko): Truncation when casting to a smaller primitive loses dataCVE-2022-34670 · NVIDIA GPU Display Driver - Linux kernel module (nvidia.ko)High
- NVIDIA GPU Display Driver - Linux kernel module (nvidia.ko): An out-of-bounds read in the kernel mode handler leaksCVE-2022-34676 · NVIDIA GPU Display Driver - Linux kernel module (nvidia.ko)High
- NVIDIA GPU Display Driver - Linux kernel module (nvidia.ko): An integer overflow in the kernel mode handler leaksCVE-2022-42263 · NVIDIA GPU Display Driver - Linux kernel module (nvidia.ko)High
- NVIDIA GPU Display Driver - Linux kernel module (nvidia.ko): An unprivileged user drives the kernel to useCVE-2022-42264 · NVIDIA GPU Display Driver - Linux kernel module (nvidia.ko)High
- NVIDIA GPU Display Driver - Linux kernel module (nvidia.ko): An unprivileged user triggers an integer overflowCVE-2023-25516 · NVIDIA GPU Display Driver - Linux kernel module (nvidia.ko)High
- NVIDIA GPU Display Driver - Linux kernel module (nvidia.ko): A race condition in the Linux display driver is winnableCVE-2025-23282 · NVIDIA GPU Display Driver - Linux kernel module (nvidia.ko)High
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.