NVIDIA GPU firmware microcontroller (Falcon): Program data in the GPU's internal microcontroller can be corrupted by a
Impact
Program data in the GPU's internal microcontroller can be corrupted by a privileged user. Corrupting firmware-level state affects the whole card, not one context, and the corruption is not visible to anything running above the driver. Listed for DGX-1, DGX-2 and DGX Station A100 among others.
Who can reach it
A user with elevated privileges on the GPU host - the tenant themselves on rented bare metal.
What to do
NVIDIA shipped the fix in GPU firmware/microcode delivered with the R470 and R450 driver branches and, on some SKUs, in an updated VBIOS. On most datacenter parts the microcontroller image is loaded by the driver at GPU init, so a driver upgrade plus a node reboot applies it; check the bulletin's product table, because a subset of boards also needs an out-of-band VBIOS/InfoROM update, which is an offline per-node flash with the GPU idle. Either way the node has to be drained.
References
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.