Nvidia has released a round of security patches to address high-severity vulnerabilities in the Nvidia GPU display driver and vGPU software.
The company said the patches address issues that "could lead to denial of service, privilege escalation, data breach, or information disclosure.".
In total, Nvidia has resolved 16 vulnerabilities related to the Nvidia GPU display driver used to support graphics processing units, as well as vGPU software for virtual workstations, servers, applications, and desktops.
The most severe vulnerability addressed in the latter is CVE‑2021‑1051. With a CVSS score of 8.4, the issue affects the kernel mode layer for the Windows GPU display driver. If exploited, this flaw could lead to a denial of service or privilege escalation.
CVE‑2021‑1052 is the second highest severity vulnerability in the driver, but this bug affects both Windows and Linux. The security flaw, with a severity rating of 7.8, was also found in the kernel mode layer and allows “user-mode clients” to access “privileged APIs.” As a result, an exploit that exploits this vulnerability could lead to denial of service, privilege escalation, and information disclosure.
With the exception of CVE‑2021‑1066, a moderate severity (CVSS 5.5) input validation issue in the vGPU manager that leads to resource overload and denial of service, each vulnerability has a severity rating of 7.8.
Nvidia has patched eight vulnerabilities in its vGPU manager and plugin, ranging from input validation errors to untrusted source values. These security flaws could lead to information disclosure and data breaches .
To stay protected, Nvidia recommended that users accept automatic security updates or download them directly from this official page.
Information source: zdnet.com
