NVIDIA Display Driver for Linux Race Condition Vulnerability in Kernel Module Leading to Denial-of-Service

A race condition vulnerability has been identified in the NVIDIA Display Driver for Linux, specifically within a kernel module. This vulnerability allows users to manipulate the order of memory instructions at the compiler or processor level, potentially leading to a denial-of-service condition.

Impact

Exploitation of this vulnerability can cause a denial-of-service condition, disrupting normal system operations.

Remediation

Users can upgrade to NVIDIA Display Driver versions 595.71.05, 580.159.03, or 535.309.01 to address this vulnerability. For those using the NVIDIA Guest Driver on Linux, versions 580.126.09 (for vGPU 19) or 535.288.01 (for vGPU 16) should be installed. Additionally, users of NVIDIA Virtual GPU Manager on Red Hat Enterprise Linux KVM or VMware vSphere should upgrade to version 595.58.02. For XenServer, VMware vSphere, Red Hat Enterprise Linux KVM, or Ubuntu with vGPU 19, version 580.126.08 is recommended. Finally, users on Ubuntu with vGPU 16 should upgrade to version 535.288.01.