NVIDIA vGPU software for Windows and Linux contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where a malicious user in the guest VM can cause a NULL-pointer dereference, which may lead to denial of service.
The product dereferences a pointer that it expects to be valid but is NULL.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Virtual_gpu | Nvidia | * | 13.9 (excluding) |
| Virtual_gpu | Nvidia | 14.0 (including) | 15.4 (excluding) |
| Virtual_gpu | Nvidia | 16.0 (including) | 16.2 (excluding) |