NVIDIA vGPU Manager (vGPU plugin): A guest-supplied string may not be null-terminated, and the host plugin reads past

Impact

A guest-supplied string may not be null-terminated, and the host plugin reads past it - disclosure, tampering or unauthorised code execution on the host, though NVIDIA notes the guest cannot choose the content it pushes.

Who can reach it

Any user inside a guest VM with a vGPU.

What to do

Upgrade the vGPU Manager on the hypervisor host to the fixed vGPU release. The host component is a kernel module inside the hypervisor, so this is a full node drain: evacuate or power off every tenant VM on the host, upgrade, reboot the host. Guest drivers must be kept within the supported version skew and updated per VM (guest reboot). No VBIOS flash, but expect a maintenance window per host and a matching hypervisor-vendor package (VMware/Citrix/KVM/Nutanix builds ship separately).

References