CVE-2021-1086
Summary
| CVE | CVE-2021-1086 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2021-04-29 19:15:00 UTC |
| Updated | 2021-05-07 20:04:00 UTC |
| Description | NVIDIA vGPU driver contains a vulnerability in the Virtual GPU Manager (vGPU plugin) where it allows guests to control unauthorized resources, which may lead to integrity and confidentiality loss or information disclosure. This affects vGPU version 12.x (prior to 12.2), version 11.x (prior to 11.4) and version 8.x (prior to 8.7). |
Risk And Classification
Problem Types: CWE-863
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Citrix | Hypervisor | - | All | All | All |
| Operating System | Nutanix | Ahv | - | All | All | All |
| Application | Nvidia | Virtual Gpu Manager | All | All | All | All |
| Operating System | Redhat | Enterprise Linux Kernel-based Virtual Machine | - | All | All | All |
| Operating System | Vmware | Vsphere | - | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Security Bulletin: NVIDIA GPU Display Driver - April 2021 | NVIDIA | CONFIRM | nvidia.custhelp.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.