NVIDIA Windows/Linux Graphics Drivers Hit By A Series Of Security Vulnerabilities

With this week's R460 driver release also comes a number of security updates. Several security issues have been patched in both the NVIDIA Windows and Linux graphics driver components.

The set of 2021 CVEs "addresses issues that may lead to denial of service, escalation of privileges, data tampering, or information disclosure."

Among the vulnerabilities are a kernel ioctl through which user-mode clients can access legacy privileged APIs, the kernel driver not completely honoring file-system permissions for GPU device-level isolation, and several more vGPU software vulnerabilities.

The Linux driver vulnerabilities have been fixed in 460.32.03 / 450.102.04 while a legacy Linux driver update is also expected in about one week to fix the issues there.

More details on these NVIDIA graphics driver vulnerabilities via the NVIDIA help section.