NVIDIA GPU Display Driver for Windows, installer: A race between the installer's integrity check and execution lets
Impact
A race between the installer's integrity check and execution lets an unprivileged local user swap in a malicious file and get it run by an administrator's install. The window is short, which is a mitigation and not a fix - driver rollouts are scheduled and repeatable, so an attacker sitting on the box knows exactly when to try.
Who can reach it
An unprivileged local user present on the host while an administrator runs the driver installer.
What to do
Install the fixed Windows GPU Display Driver branch listed in the NVIDIA bulletin. nvlddmkm.sys is a kernel driver: the swap needs a host reboot, so on a Windows GPU node this is a drain-and-reboot, not a live driver reload. No VBIOS or BMC flash involved.
References
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.