CVE-2021-1053: 
NVIDIA Graphics Driver vulnerability analysis and mitigation

NVIDIA GPU Display Driver for Windows and Linux, all versions, contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape or IOCTL in which improper validation of a user pointer may lead to denial of service. The vulnerability was disclosed on January 7, 2021 and assigned a CVSS base score of 6.6 (NVIDIA Security).

The vulnerability exists in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape or IOCTL where improper validation of a user pointer occurs. It has been assigned a CVSS vector of AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H, indicating local access required, low attack complexity, low privileges required, no user interaction needed, unchanged scope, with low confidentiality and integrity impact but high availability impact (NVIDIA Security).

The exploitation of this vulnerability can lead to denial of service on affected systems. The vulnerability affects both Windows and Linux operating systems running NVIDIA GPU Display Drivers (NVIDIA Security).

The vulnerability requires local access with low privileges to exploit. The attack complexity is considered low, and no user interaction is needed for exploitation (NVIDIA Security).

NVIDIA has released security updates to address this vulnerability. For Windows systems, users should update to version 461.09 for R460 branch, 452.77 for R450 branch, and 392.63 for R390 branch. For Linux systems, users should update to version 460.32.03 for R460 branch and 450.102.04 for R450 branch (NVIDIA Security).