January 2025 NVIDIA GPU Display Driver Bulletin: Buffer Overflows, vGPU Memory Corruption, and a Unified Memory Leak
| CVE | Score | Component | Type |
|---|---|---|---|
| CVE-2024-0146 | 7.8 High | vGPU Manager | Memory corruption |
| CVE-2024-0150 | 7.1 High | GPU Display Driver — Windows & Linux | Out-of-bounds write |
| CVE-2024-0131 | 4.4 Medium | GPU Kernel Driver — Windows & Linux | Incorrect length buffer read |
| CVE-2024-0147 | 5.5 Medium | GPU Display Driver — Windows & Linux | Use-after-free |
| CVE-2024-53869 | 5.5 Medium | Unified Memory Driver — Linux | Uninitialised memory leak |
| CVE-2024-53881 | 5.5 Medium | vGPU Host Driver | Interrupt storm |
| CVE-2024-0149 | 3.3 Low | GPU Display Driver — Linux | Unauthorised file access |
Disclosed January 2025. CVE-2024-0149 discovered by Wolfgang Frisch.
For executives
NVIDIA's January 2025 GPU display driver and vGPU software bulletin patched seven vulnerabilities spanning four distinct components of the GPU software stack. The most significant affects the Virtual GPU Manager — a malicious guest virtual machine can cause memory corruption on the hypervisor host, potentially reaching code execution.
CVE-2024-0146: vGPU Manager memory corruption (CVSS 7.8)
A malicious guest can trigger memory corruption in the Manager process on the host. The Manager runs in a privileged context on the host, outside the isolation boundary of any individual guest. Successful exploitation can lead to code execution, denial of service, and data tampering on the hypervisor host — affecting not just the malicious guest but potentially every other guest sharing the same physical GPU.
CVE-2024-53869: uninitialised memory leak in the Unified Memory driver (CVSS 5.5)
The driver fails to fully zero or initialise memory in certain cleanup conditions. The Unified Memory driver manages memory that moves between CPU and GPU address spaces. Data may include GPU kernel outputs, intermediate computational results, or previously used GPU context data from other processes.
CVE-2024-53881: interrupt storm via vGPU host driver (CVSS 5.5)
A malicious guest can trigger a high volume of interrupts directed at the host. In a shared GPU environment, an interrupt storm originating from one guest can degrade or deny service for all other guests sharing the same physical GPU.
Patch
Linux: R550 branch at 550.144.03 or later, R535 branch at 535.230.02 or later. vGPU updates via the NVIDIA Licensing Portal.