Security News

NVIDIA this week released patches for a dozen vulnerabilities in GPU display drivers and vGPU software, including multiple issues that could lead to code execution. The most severe of the bugs affecting the GPU drivers include CVE‑2020‑5962, which was found in the NVIDIA GPU display driver, and CVE‑2020‑5963, which resides in the CUDA driver.

In contrast, a high-end GPU might have 2000 to 5000 cores, but they aren't each able to run completely different instructions at the same time. Servers fitted with GPUs probably need two sets of patches, covering both the NVIDIA GPU drivers that control the actual hardware in the physical system, and the NVIDIA vGPU software, which shares out physical GPUs between guest operating systems running under virtualisation software from vendors including Citrix, Red Hat and VMWare.

Graphics chipmaker Nvidia has fixed two high-severity flaws in its graphics drivers. Nvidia's graphics driver for Windows is used in devices targeted to enthusiast gamers; it's the software component that enables the device's operating system and programs to use its high-level, gaming-optimized graphics hardware.

Thanks to its agile and strong product design and development capabilities, Inspur is one of the first in the industry to support the NVIDIA A100 Tensor Core GPU and build up a comprehensive and competitive next-generation AI computing platform. The NVIDIA A100 offers multi-instance GPU technology, which enables a single GPU to be partitioned into seven hardware-isolated instances to work on multiple networks simultaneously.

Digital Realty developed a pre-configured Data Hub footprint based on typical customer deployment scenarios on NVIDIA DGX and DGX PODTM configurations. Delivered as part of NVIDIA DGX-Ready Data Center program, the Data Hub solution accommodates a typical enterprise deployment of AI infrastructure to address the placement, connectivity and hosting of critical data infrastructure in proximity to users, networks, clouds and things.

Keysight Technologies, a leading technology company that helps enterprises, service providers and governments accelerate innovation to connect and secure the world, announced it is accelerating the development of flexible virtualized networks and high-value mobile services with NVIDIA. Mobile operators are in the process of transforming their networks, using a dynamic virtualized radio access network architecture and open RAN standard interfaces, to cost-effectively and flexibly deliver a broad range of services that rely on low latencies and high throughput. Keysight offers solutions that enable mobile operators and network equipment manufacturers to validate 5G and legacy radio access networks as well as core networks that are critical to ensuring the end-user experience of applications using vRAN architecture.

This is in the Windows GPU Display Driver control panel for the GeForce, Quadro NVS, and Tesla products leading to a corrupt system file and escalation of privileges or denial of service. A second control panel flaw affecting the same products is CVE‑2020‑5958, which might allow the planting of a malicious DLL file with the same results as above along with information disclosure.

Nvidia's graphics processing unit display driver is used in devices targeted for enthusiast gamers; it's the software component that enables the device's operating system and programs to use its high-level graphics hardware. The most severe flaw exists in the control panel component of the graphics driver, which is a utility program helping users monitor and adjust the settings of their graphics adapter.

NVIDIA addressed the bugs in GPU Display Driver version 442.50, version 432.28, version 426.50, and version 392.59. For Tesla products running R418 versions, GPU Display Driver version 426.50 addresses the flaws.

ScaleMatrix, through its subsidiary company, DDC, the global leader in providing scalable data center-to-edge solutions based on its patented Dynamic Density Control (DDC) cabinet technology,...