NVIDIA Windows GPU Display Driver (nvlddmkm.sys): Same escape-handler length bug but with information disclosure

CVE-2019-5670NVIDIA / GPU stackcurated

Impact

Same escape-handler length bug but with information disclosure and code execution called out: kernel memory contents can leak back to an unprivileged caller.

Who can reach it

Any local user with GPU device access.

What to do

Install the fixed Windows GPU Display Driver branch listed in the NVIDIA bulletin. nvlddmkm.sys is a kernel driver: the swap needs a host reboot, so on a Windows GPU node this is a drain-and-reboot, not a live driver reload. No VBIOS or BMC flash involved.

References

http://support.lenovo.com/us/en/solutions/LEN-26250 https://nvd.nist.gov/vuln/detail/CVE-2019-5670

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.