CVE-2021-1061: Race Condition
NVIDIA vGPU manager contains a vulnerability in the vGPU plugin, in which a race condition may cause the vGPU plugin to continue using a previously validated resource that has since changed, which may lead to denial of service or information disclosure. This affects vGPU version 8.x (prior to 8.6) and version 11.0 (prior to 11.3).
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this NVIDIA vGPU manager vulnerability?
The vulnerability ID for this NVIDIA vGPU manager vulnerability is CVE-2021-1061.
What is the severity of CVE-2021-1061?
The severity of CVE-2021-1061 is medium with a CVSS score of 6.3.
What is the affected software for CVE-2021-1061?
The affected software for CVE-2021-1061 is NVIDIA Virtual GPU Manager versions 8.x (prior to 8.6) and 11.x (prior to 11.3).
What is the impact of CVE-2021-1061?
CVE-2021-1061 may lead to denial of service or information disclosure.
How can I fix CVE-2021-1061?
To fix CVE-2021-1061, update to NVIDIA Virtual GPU Manager version 8.6 or later for version 8.x, and version 11.3 or later for version 11.x.