NVSentinel Linux gRPC Health-Event DoS Vulnerability

Executive Summary

NVIDIA NVSentinel for Linux has a vulnerability in the platform-connectors component. The gRPC health-event interface is exposed over a world-writable Unix domain socket without authentication. This allows unauthorized users to interact with the interface, potentially causing a denial of service.

Useful 0 Not Useful 0

Detection Guidance

Check for a world-writable Unix domain socket used by NVSentinel's gRPC health-event interface. Look for files in /tmp or /var/run with permissions allowing any user to write. Use commands like 'ls -la /tmp | grep -i nvsentinel' or 'find / -type s -perm -o+w 2>/dev/null' to locate suspicious sockets.

Useful 0 Not Useful 0

Impact Analysis

An attacker could exploit this vulnerability to disrupt the normal operation of NVSentinel, leading to a denial of service. This could affect system availability and reliability, especially in environments where NVSentinel is used for monitoring or management.

Useful 0 Not Useful 0

Mitigation Strategies

Remove write permissions from the Unix domain socket. Restrict access to the NVSentinel service by modifying its configuration to disable the gRPC health-event interface if not required. Update NVSentinel to the latest patched version if available.

Useful 0 Not Useful 0