NVIDIA GPU Display Driver (Windows nvlddmkm.sys + Linux nvidia.ko): Improper access control in the kernel-mode layer

Impact

Improper access control in the kernel-mode layer on both Windows and Linux, producing disclosure or data corruption. Data corruption from a driver-level access control gap is the quiet kind of failure - silently wrong training runs rather than a visible crash. Debian and Gentoo shipped it as a security update.

Who can reach it

Any local user or GPU container on the host.

What to do

Install the fixed GPU Display Driver branch on both Windows and Linux nodes. The kernel component (nvlddmkm.sys / nvidia.ko) cannot be hot-swapped under load, so this is a node drain and reboot per host; restart the container runtime afterwards so mounted driver libraries match the kernel module. No VBIOS or BMC flash.

References