NVIDIA vGPU Manager (vGPU plugin): MULTI-TENANT ISOLATION: a guest VM hands the vGPU Manager a wrongly sized buffer

Impact

MULTI-TENANT ISOLATION: a guest VM hands the vGPU Manager a wrongly sized buffer and drives the host into an out-of-bounds GPU access. One tenant VM can take down the vGPU host, which means every other tenant sharing that physical GPU goes with it.

Who can reach it

Any unprivileged user inside any guest VM assigned a vGPU on the host.

What to do

Upgrade the vGPU Manager on the hypervisor host to the fixed vGPU release. The host component is a kernel module inside the hypervisor, so this is a full node drain: evacuate or power off every tenant VM on the host, upgrade, reboot the host. Guest drivers must be kept within the supported version skew and updated per VM (guest reboot). No VBIOS flash, but expect a maintenance window per host and a matching hypervisor-vendor package (VMware/Citrix/KVM/Nutanix builds ship separately).

References