NVIDIA Windows / Linux graphics drivers impacted by a series of security vulnerabilities

This week’s R460 driver release also comes with a number of security updates. Several security issues have been corrected in NVIDIA Windows and Linux graphics driver components.

All CVE 2021 “resolves issues that can cause denial of service, elevation of privilege, data tampering, or information disclosure.“

The vulnerabilities include a kernel ioctl where user mode clients can access legacy privileged APIs, the kernel driver not fully respecting file system permissions for GPU device level isolation, and several other vulnerabilities vGPU software.

The Linux driver vulnerabilities have been fixed in 460.32.03 / 450.102.04 while a legacy Linux driver update is also expected in about a week to resolve the issues.

More details on these NVIDIA graphics driver vulnerabilities can be found in the NVIDIA help section.