Nvidia published a security bulletin on May 16, 2022 in which it informs customers about a new software security update for the Nvidia GPU display driver. The update patches security issues in earlier driver versions that can lead to “denial of service, information disclosure, or data tampering”.
While it is common for companies to release security updates for their software applications and drivers, it is uncommon to receive updates for products that are not supported anymore.
In this particular case, Nvidia released security updates for Kepler-series graphics adapters that it no longer supports officially with Game Ready Drivers.
The company retired most products belonging to the GTX 600 and GTX 700 Kepler series in 2021. The first Kepler-based video cards were released in 2012 by Nvidia. The full list of
Retired products are still usable, but Nvidia won’t release Game Ready drivers for these products anymore once they retire. Nvidia did promise to release security updates for the products until 2024 to address security issues in drivers.
The Windows release notes highlight that the update has been released for Nvidia products that are no longer supported by Game Ready Drivers.
NVIDIA has released a software security update display driver for desktop Kepler-series GeForce GPUs which are no longer supported by Game Ready Drivers. This update addresses issues that may lead to multiple security impacts.
Windows and Linux versions of the drivers are affected according to the security bulletin.
The updates can be downloaded from Nvidia’s downloads website. All it takes is to use the drop down menus at the top to display available drivers for the selected product.
The security bulletin lists a total of ten vulnerabilities in Nvidia GPU display drivers. Most are vulnerabilities in the kernel mode layer on Windows and Linux devices, while some address security issues in the DirectX11 user mode driver on Windows, or a vulnerability in the ECC layer.
Nvidia released driver updates for most supported products as well. Nvidia Studio and Tesla R510 updates are expected in the week of May 23, 2022. All other supported products have received security updates already.
Now You: how frequently do you update drivers on your systems?