Exploitation Summary
EIP tracks 1 public exploit for CVE-2021-1056. PoCs published by pokerfaceSad.
AI-analyzed exploit summary This repository contains a functional exploit for CVE-2021-1056, which allows an attacker in a GPU container to access all GPU devices on the host by creating specific character device files. The exploit demonstrates the vulnerability in environments using `nvidia-container-runtime` or Kubernetes with `k8s-device-plugin`.
Description
NVIDIA GPU Display Driver for Linux, all versions, contains a vulnerability in the kernel mode layer (nvidia.ko) in which it does not completely honor operating system file system permissions to provide GPU device-level isolation, which may lead to denial of service or information disclosure.
Exploits (1)
This repository contains a functional exploit for CVE-2021-1056, which allows an attacker in a GPU container to access all GPU devices on the host by creating specific character device files. The exploit demonstrates the vulnerability in environments using `nvidia-container-runtime` or Kubernetes with `k8s-device-plugin`.
References (3)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H