GPU VulnDB

Database/NVIDIA / GPU stack

NVIDIA vGPU Manager kernel module (nvidia.ko, host): One vGPU can starve the other vGPUs hosted on the same physical

CVE-2021-1121NVIDIA / GPU stackcurated

Impact

One vGPU can starve the other vGPUs hosted on the same physical GPU of resources. This is the noisy-neighbour problem as a security bug: a tenant deliberately degrades every co-tenant on the card, and nothing in the vGPU scheduler stops them.

Who can reach it

Any user inside a guest VM sharing a physical GPU with other tenants.

What to do

Upgrade the vGPU Manager on the hypervisor host to the fixed vGPU release. The host component is a kernel module inside the hypervisor, so this is a full node drain: evacuate or power off every tenant VM on the host, upgrade, reboot the host. Guest drivers must be kept within the supported version skew and updated per VM (guest reboot). No VBIOS flash, but expect a maintenance window per host and a matching hypervisor-vendor package (VMware/Citrix/KVM/Nutanix builds ship separately).

References

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.