With the release of the driver of R460 this week also comes a number of security updates. Several security issues have been identified in the NVIDIA Windows and Linux graphics driver components.
The set of 2021 CVEs “addresses issues that may lead to denial of service, increase in privileges, tampering with data or disclosure of information.”
Among the vulnerabilities are a core ioctl through which user mode clients can access old privileged APIs, the kernel driver that does not fully respect the file system permissions for GPU isolation at the device level, and several other vGPU software vulnerabilities.
The vulnerabilities in the Linux driver have been fixed in 460.32.03 / 450.102.04, while an outdated update of the Linux drivers is expected in about one week to resolve the issues there.
Learn more about the vulnerabilities of this NVIDIA graphics driver through the NVIDIA Help Center.