Source: Nvidia/Anandtech: https://www.anandtech.com/show…pectre-mitigation-updates
In the wake of Meltdown and Spectre, essentially every major industry player has issued a security statement, and NVIDIA is no exception, especially as a hardware vendor. Their initial security bulletin last week disclosed that while their GPU hardware was thought to be “immune,” security updates to GPU drivers and affected ARM SoCs were forthcoming. Along with the standard updates and bug fixes, 390.65 brings some of those mitigations to the GPU display driver side.
Strictly-speaking, 390.65 brings a security update with mitigations for a variant of Spectre (CVE-2017-5753), and is applicable to GeForce, Quadro, and NVS products. NVIDIA did note that their GPU display driver is potentially susceptible to the second Spectre variant (CVE-2017-5715), and are working on a related future update. The reason for the Spectre-focused fixes from NVIDIA, despite the fact that these are GPU drivers and have nothing to do with the vulnerable CPU hardware, is that Spectre in particular is an attack that targets other programs and spies on their data via a side channel. Since the hardware problems allowing Spectre cannot be easily fixed, part of the industry-wide mitigation efforts include modifying critical software so that they can't be spied on by Spectre. GPU drivers in turn are especially compelling Spectre targets - and high priority fixes - since they have in-depth kernel access.
In any case, Tesla and GRID products are additionally affected; depending on the OS/virtualization platform, security updates for those are either already released or due to release by the end of the month.
Beyond GPU drivers, GeForce Experience has also received a beta 3.12 security update, with general availability expected next Monday. For NVIDIA’s other products, there are now security updates for SHIELD Tablet and SHIELD TV, as well as Tegra Jetson TK1, TX1, and TX2. Across all products, NVIDIA has only identified the TX2 as vulnerable to both Meltdown and Spectre, as opposed to just Spectre.
390.65 also brings support for the recently-announced NVIDIA Freestyle, a new GeForce Experience feature that applies post-processing filters to supported games. Currently, Freestyle, along with an updated Ansel, is only available in the beta GeForce Experience 3.12 when Experimental Features are enabled.
On the more minor side, 390.65 now features a pop-up balloon notification when an external GPU is connected or disconnected, as well as updates/additions to SLI profiles for DIRT 4, Total War: Warhammer II, and X-Morph Defense.
Wrapping up this driver update, NVIDIA has documented the following resolved issues:
- Surfaces in Batman Arkham Knight are rendered incorrectly on a GeForce GTX 970.
- Artifacts appear when using Gamestream on the GeForce GTX 1080 Ti, TITAN X (Pascal), and TITAN Xp.
- On notebook Fermi GPUs, enabling stereoscopic 3D brings up error message pointing to the Stereo driver.
The updated drivers are available through the GeForce Experience Drivers tab or online at the NVIDIA driver download page. More information on this update and further issues can be found in the 390.65 release notes.
More details on NVIDIA’s Meltdown and Spectre mitigations can be found through their Security Bulletin page.
Bookmarks