NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), in which certain input data is not validated, which may lead to information disclosure, tampering of data, or denial of service. NVIDIA recommends consulting a security or IT professional to evaluate the risk to your specific configuration. NVIDIA vGPU Software The NVIDIA risk assessment is based on an average of risk across a diverse set of installed systems and may not represent the true risk to your local installation. The NVIDIA risk assessment is based on an average of risk across a diverse set of installed systems and may not represent the true risk to your local installation. NVIDIA Windows GPU Display Driver for Windows contains a vulnerability in the kernel driver ( nvlddmkm.sys) where a NULL pointer dereference may lead to system crash. NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where the software uses a reference count to manage a resource that is incorrectly updated, which may lead to denial of service. NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer ( nvlddmkm.sys or nvidia.ko) where improper access control may lead to denial of service, information disclosure, or data corruption.

An attacker does not have any control over the information and may conduct only limited data modification. NVIDIA Windows GPU Display Driver for Windows contains a vulnerability in the kernel mode layer ( nvlddmkm.sys) handler for DxgkDdiEscape where the program dereferences a pointer that contains a location for memory that is no longer valid, which may lead to code execution, denial of service, or escalation of privileges. Such an attack may lead to code execution, escalation of privileges, denial of service, and information disclosure. This attack requires a user with system administration rights to execute the installer and requires the attacker to replace the files in a very short time window between file integrity validation and execution. NVIDIA Windows GPU Display Driver installer contains a vulnerability where an attacker with local unprivileged system access may be able to replace an application resource with malicious files.

Descriptions use CWE™, and base scores and vectors use CVSS v3.1 standards.

This section provides a summary of potential vulnerabilities that this security update addresses and their impact.

Virtual display manager license missing