CVE-2021-1098: High severity nvidia virtual gpu graphics driver vulnerability
NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where it doesn't release some resources during driver unload requests from guests. This flaw allows a malicious guest to perform operations by reusing those resources, which may lead to information disclosure, data tampering, or denial of service. This affects vGPU version 12.x (prior to 12.3), version 11.x (prior to 11.5) and version 8.x (prior 8.8).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-1098?
The severity of CVE-2021-1098 is rated as high due to the potential for information disclosure.
How do I fix CVE-2021-1098?
To fix CVE-2021-1098, update your NVIDIA vGPU software to the latest version that addresses this vulnerability.
What versions of NVIDIA vGPU are affected by CVE-2021-1098?
NVIDIA vGPU versions from 8.0 to 8.8, 11.0 to 11.5, and 12.0 to 12.3 are affected by CVE-2021-1098.
Can CVE-2021-1098 lead to guest-to-guest attacks?
Yes, CVE-2021-1098 allows a malicious guest to exploit resources and potentially perform operations that could impact other guests.
Is CVE-2021-1098 an insider threat vulnerability?
CVE-2021-1098 can be considered an insider threat vulnerability as it requires a malicious actor within a virtualized environment to exploit its weaknesses.