NVIDIA vGPU software for Windows and Linux contains a vulnerability where unprivileged users could execute privileged operations on the host. A successful exploit of this vulnerability might lead to data tampering, escalation of privileges, and denial of service.
Weakness
A product incorrectly assigns a privilege to a particular actor, creating an unintended sphere of control for that actor.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Virtual_gpu | Nvidia | * | 13.11 (excluding) |
| Virtual_gpu | Nvidia | 14.0 (including) | 16.6 (excluding) |
| Virtual_gpu | Nvidia | 17.0 (including) | 17.2 (excluding) |