Nvidia warns gamers to update their GPU drivers due to severe security problems | TechRadar
 
Nvidia has revealed several worrying security issues in its graphics card drivers, and is strongly recommending anyone with one of its GPUs to update its drivers as soon as possible. As ThreatPost reports, there are five driver security bugs that all score highly in the CVSS vulnerability scale.
 
The most dangerous of the security bugs that Nvidia has acknowledged appears to be CVE-2021-1074, which is 7.5 out of 10 on the CVSS scale. This bug was found in the Nvidia driver’s installer, and could allow an attacker with physical access to swap out an application resource with malicious files. This could lead to malicious code being run, a denial of service attack, or personal information being stolen. Meanwhile, CVE-2021-1075 is another high severity bug (scoring 7.3 on the CVSS scale), and resides in the nvlddmkm.sys handler for DxgkDdiEscape. As ThreatPost explains, “the program dereferences a pointer that contains a location for memory that is no longer valid, which may lead to code execution, denial of service, or escalation of privileges.”
 
CVE-2021-1076 is a medium-severity bug found in the Nvidia GPU Display Driver for Windows and Linux’s kernel mode layer, where malicious users can exploit improper access control to launch denial of service, information theft or data corruption attacks.
 
CVE-2021-1077 is a medium-level risk in the Windows and Linux drivers, where the driver “uses a reference count to manage a resource that is incorrectly updated, which may lead to denial of service.”
 
There is also another medium-severity bug, CVE-2021-1078, which was found in all versions of the Windows Nvidia Driver, and again affected the kernel – this time a NULL pointer deference could lead to the PC crashing. If that’s not bad enough, Nvidia also revealed eight software vulnerabilities in its vGPU software – and these affect workstations and artificial intelligence workloads, and are all medium to high levels of severity.
 
Nvidia has been quick to release driver updates to fix these vulnerabilities, and they should be installed as soon as possible, either though the Nvidia Driver Downloads page or via the GeForce Experience app if you have it installed. Check out our guide on how to update and install the latest Nvidia graphics drivers for more help. The amount and severity of these security bugs is certainly troubling, and we’ve contacted Nvidia for comment.
 
Stay safe and update your graphics driver for NVIDIA as soon as possible in my opinion. 

I hope this doesn't end up being something like the intel bugs where you lose out on performance. :/

Agree with @Kuro1n.

How does a user manage cases where these updated 'safe' drivers break gaming otherwise functional games (as is wont to happen with driver updates, and why many of us stay with older ones for long periods)?

I wonder if this is how they will start impacting the mining...

Thanks for the info

kelkel1
So, would the drivers not need to access the internet to have these vulnerabilities exploited?

If the drivers are on a computer with access to the internet, doesn't that mean that the driver has access to the internet?
NVIDIA's telemetry assures that the driver is using internet access.

They should issue a public notice to miners to update drivers ASAP and have the drivers kill off mining to 10% unless they can provide irrefutable proof that the card is used for primarily gaming

faith730
They should issue a public notice to miners to update drivers ASAP and have the drivers kill off mining to 10% unless they can provide irrefutable proof that the card is used for primarily gaming

That would take roughly 15 seconds for the miners to get around.

who thought a graphics card driver could cause this problem ?

I'll keep this in mind when I get a GPU in 2022.

I didn't even know about this, I usually update GPU drivers every now and then. (especially when a game-ready driver comes out for something I'm going to play)
 
Thanks for the PSA!

The first time I didn't install the NVidia software suite for automatic updates.
Thx for the info. Will update my gtx 1080 soon

Thanks for letting us know.

Gotta help with those hash-rates, amirite?

Yikes, thanks for the heads up.