NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (nvidia.ko), where a user in the guest OS can cause a GPU interrupt storm on the hypervisor host, leading to a denial of service.
The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.
The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.
Link | Tags |
---|---|
https://nvidia.custhelp.com/app/answers/detail/a_id/5312 | vendor advisory |