CVEvulnerability
CVE-2021-1061
6.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2021-01-08
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.3 MEDIUM — CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H
- CVSS 2.0 ([email protected])
- 3.3 LOW — AV:L/AC:M/Au:N/C:P/I:N/A:P
- Weaknesses
- CWE-362
Description
NVIDIA vGPU manager contains a vulnerability in the vGPU plugin, in which a race condition may cause the vGPU plugin to continue using a previously validated resource that has since changed, which may lead to denial of service or information disclosure. This affects vGPU version 8.x (prior to 8.6) and version 11.0 (prior to 11.3).
Affected configurations
• nvidia virtual gpu manager (>= 8.0 < 8.6)
• nvidia virtual gpu manager (>= 11.0 < 11.3)
Related
Weakness · CWE (1)
- CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization weakness
References
- https://nvidia.custhelp.com/app/answers/detail/a_id/5142 Vendor Advisory
- https://nvidia.custhelp.com/app/answers/detail/a_id/5142 Vendor Advisory