NVIDIA vGPU Software Stack Buffer Overflow Vulnerability in Virtual GPU Manager

A stack buffer overflow vulnerability has been identified in NVIDIA vGPU software for Linux-style hypervisors, specifically within the Virtual GPU Manager component. This vulnerability allows a malicious guest to manipulate memory, potentially leading to code execution, denial of service, escalation of privileges, information disclosure, or data tampering.

Impact

Exploitation of this vulnerability could result in unauthorized code execution, disruption of service, unauthorized privilege escalation, leakage of sensitive information, or unauthorized modification of data.

Remediation

Users can download the updated vGPU software through the NVIDIA Licensing Portal. For specific version details, refer to the NVIDIA vGPU Software Security Update Bulletin.