NVIDIA GPU Driver Kernel Mode Layer Contains Vulnerability Leading to Privilege Escalation
Overview
NVIDIA released a security update for its GPU display driver, addressing a high-severity vulnerability in the kernel mode layer. The vulnerability stems from improper input validation when processing specific data structures passed from user-mode applications. A specially crafted, malicious application could send malformed data to the driver's kernel interface. This could lead to a buffer overflow within the kernel, resulting in a system crash (Denial of Service). More critically, on certain driver versions and hardware combinations, successful exploitation could allow an attacker with local user access to execute arbitrary code with kernel-level privileges. This would constitute a full system compromise, allowing the attacker to bypass all user-space security controls. The vulnerability affects a wide range of GeForce, Quadro, and Tesla GPUs on both Windows and Linux operating systems. This is particularly concerning for multi-tenant AI/ML development environments and cloud-based GPU instances, where a compromised tenant could potentially impact the host hypervisor or other tenants if proper isolation is not in place.
Affected Systems
Testing Guide
1. On Windows, open the NVIDIA Control Panel, go to Help -> System Information to check the driver version. 2. On Linux, run the command `nvidia-smi` in the terminal. The driver version is displayed in the top right corner. 3. Compare your installed driver version against the patched versions listed in the "Affected Systems" section. 4. If your version is lower than the patched version, the system is vulnerable and should be updated immediately.
Mitigation Steps
1. Update NVIDIA drivers to the latest version available from the NVIDIA Driver Downloads page or your cloud provider's marketplace. 2. Apply operating system security updates promptly, as they may contain additional mitigations. 3. In multi-tenant environments, ensure that GPU partitioning and virtualization technologies (like NVIDIA vGPU) are fully patched and correctly configured to provide strong tenant isolation. 4. Limit user access on systems with vulnerable drivers and avoid running untrusted applications.
Patch Details
Patches are included in Windows driver version 555.99 and Linux driver version 550.90.07 and later.