NVIDIA GPU Display Driver, DirectX and OpenGL user-mode drivers: A crafted pixel shader drives the user-mode driver

Impact

A crafted pixel shader drives the user-mode driver into infinite recursion and kills the rendering process or the session. On a shared render farm or VDI host, one tenant's shader takes out their own session and can pin a core doing it.

Who can reach it

Anyone who can submit shaders - remote session users, tenant VMs, or local processes.

What to do

Install the fixed GPU Display Driver branch on both Windows and Linux nodes. The kernel component (nvlddmkm.sys / nvidia.ko) cannot be hot-swapped under load, so this is a node drain and reboot per host; restart the container runtime afterwards so mounted driver libraries match the kernel module. No VBIOS or BMC flash.

References