1. Home
  2. CVE Database
  3. CVE-2021-1061
MEDIUM · 6.3

CVE-2021-1061

NVIDIA vGPU manager contains a vulnerability in the vGPU plugin, in which a race condition may cause the vGPU plugin to continue using a previously validated resource that has since changed, which may...

Vulnerability Description

NVIDIA vGPU manager contains a vulnerability in the vGPU plugin, in which a race condition may cause the vGPU plugin to continue using a previously validated resource that has since changed, which may lead to denial of service or information disclosure. This affects vGPU version 8.x (prior to 8.6) and version 11.0 (prior to 11.3).

CVSS Score

6.3

MEDIUM

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
HIGH

Affected Products

VendorProductVersions
NvidiaVirtual Gpu Manager>= 8.0, < 8.6
CitrixHypervisor-
NutanixAhv-
RedhatEnterprise Linux Kernel-Based Virtual Machine-
VmwareVsphere-

Related Weaknesses (CWE)

CWE-362

References

FAQ

What is CVE-2021-1061?

CVE-2021-1061 is a vulnerability with a CVSS score of 6.3 (MEDIUM). NVIDIA vGPU manager contains a vulnerability in the vGPU plugin, in which a race condition may cause the vGPU plugin to continue using a previously validated resource that has since changed, which may...

How severe is CVE-2021-1061?

CVE-2021-1061 has been rated MEDIUM with a CVSS base score of 6.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2021-1061?

Check the references section above for vendor advisories and patch information. Affected products include: Nvidia Virtual Gpu Manager, Citrix Hypervisor, Nutanix Ahv, Redhat Enterprise Linux Kernel-Based Virtual Machine, Vmware Vsphere.