NVIDIA vGPU Software Information Disclosure Vulnerability in Virtual GPU Manager

A vulnerability allowing information disclosure has been identified in NVIDIA vGPU software, specifically in the Virtual GPU Manager component. This issue arises because a guest virtual machine can access global GPU metrics that may be affected by activities in other virtual machines. The vulnerability is present in all versions of the vGPU software prior to and including vGPU 18.3, as well as in all versions prior to and including vGPU 16.10.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive information, specifically global GPU metrics that may be influenced by other virtual machines' activities.

Remediation

Users can upgrade to vGPU 18.4 or vGPU 16.11, both of which include the necessary security update. For vGPU software updates, visit the NVIDIA Licensing Portal.