First published: Mon Feb 07 2022(Updated: )
NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (nvidia.ko), where a user in the guest OS can cause a GPU interrupt storm on the hypervisor host, leading to a denial of service.
Credit: psirt@nvidia.com
Affected Software | Affected Version | How to fix |
---|---|---|
Nvidia Cloud Gaming Virtual Gpu | <2022 | |
NVIDIA vGPU Software | >=8.0<8.10 | |
NVIDIA vGPU Software | >=11.0<11.7 | |
NVIDIA vGPU Software | >=13.0<13.2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2022-21816 is classified as a denial of service vulnerability, which can significantly impact system availability.
To fix CVE-2022-21816, update to the latest version of the NVIDIA vGPU software that patches this vulnerability.
CVE-2022-21816 affects users of NVIDIA vGPU software, specifically those running certain versions of the Virtual GPU Manager.
The potential impact of CVE-2022-21816 includes causing a GPU interrupt storm, leading to service disruption for applications relying on the hypervisor.
Currently, there are no specific workarounds for CVE-2022-21816; the recommended action is to apply the software update.