PT-2021-13451 · Nvidia · Nvidia Gpu Display Driver

Published 2021-01-08 · Updated 2022-07-12 · CVE-2021-1055

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions NVIDIA GPU Display Driver for Windows, all versions

Description The issue is related to improper access control in the kernel mode layer handler for DxgkDdiEscape, which may lead to denial of service and information disclosure. This affects the nvlddmkm.sys handler.

Recommendations For all versions, consider restricting access to the kernel mode layer handler for DxgkDdiEscape until a patch is available. As a temporary workaround, consider disabling the nvlddmkm.sys handler until a fix is provided. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2021-1055

Affected Products

Nvidia Gpu Display Driver

References · 5

• https://osv.dev/vulnerability/CVE-2021-1055 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-1055 · Security Note
• https://nvidia.custhelp.com/app/answers/detail/a_id/5142 · Vendor Advisory
• https://t.me/cibsecurity/21802 · Telegram Post
• https://t.me/cvenotify/8313 · Telegram Post