GPU VulnDB

Database/Control plane, storage & DevOps

Tenant handoff on bare metal: Reimaging the host disk clears nothing in the BMC, UEFI/SPI flash, NIC/DPU firmware, GPU

NCVD-0000-013-tenant-handoff-on-bare-metalControl plane, storage & DevOpscurated

Impact

Reimaging the host disk clears nothing in the BMC, UEFI/SPI flash, NIC/DPU firmware, GPU VBIOS or the ESP. Every below-OS CVE in this table is therefore also a cross-tenant persistence primitive on any bare-metal GPU offering

Who can reach it

Local, from a prior tenant

What to do

Requires a full firmware re-provision and remote attestation between tenants — measured boot with verified PCRs, BMC reflash, NIC firmware verification. This is the single largest unpriced operational cost in bare-metal GPU rental

References

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.