GPU / accelerator firmware (VBIOS, GSP, NVSwitch): GPU-resident firmware sits below the host OS and is not covered
NCVD-0000-012-gpu-accelerator-firmware-vbios-gNVIDIA / GPU stackcurated
Impact
GPU-resident firmware sits below the host OS and is not covered by host EDR or reimaging. NVIDIA ships GPU firmware fixes through opaque bundled updates, so a neocloud cannot independently verify what changed or attest the running image between tenants
Who can reach it
Local, from a tenant with device access
What to do
Enforce a firmware re-flash and attestation step at every tenant handoff rather than trusting a host reimage. NVIDIA's bundle model means the operator cannot audit the fix, only apply it
References
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.