NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where it can dereference a NULL pointer, which may lead to denial of service. This affects vGPU version 12.x (prior to 12.3), version 11.x (prior to 11.5) and version 8.x (prior 8.8).
The product dereferences a pointer that it expects to be valid but is NULL.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Virtual_gpu | Nvidia | 8.0 (including) | 8.8 (excluding) |
| Virtual_gpu | Nvidia | 11.0 (including) | 11.5 (excluding) |
| Virtual_gpu | Nvidia | 12.0 (including) | 12.3 (excluding) |