Nvidia updates graphics drivers to protect against Spectre CPU attacks

Nvidia updates graphics drivers to protect against Spectre CPU attacks

The Game Ready driver Nvidia released earlier this week for GeForce graphics cards ostensibly added new features announced at CES, like Nvidia FreeStyle filters, Ansel screenshot improvements, and ShadowPlay Highlights for Fortnite, Crossout, and Elex. But it quietly held another purpose, too: Protecting your data from hackers. Nvidia has patched its graphics cards to protect against the devastating Spectre attack that shook up the computing world over the past week.

Like its sister flaw, Meltdown, Spectre exploits how computer processors handle a task called “speculative execution” to gain access to sensitive data stored in your operating system’s protected kernel. But while Meltdown could be resolved by operating system patches, Spectre is harder to smack down, requiring individual software vendors to update potentially vulnerable applications. Nvidia discovered its GPU display driver software can fall prey to the Spectre CPU exploit—unsurprising, given how deeply graphics card software digs into your operating system kernel—and is pushing these updates to strengthen against it.

To be clear, Nvidia graphics hardware is not vulnerable to Meltdown or Spectre. This is a software patch to help protect against exploits against CPUs from Intel, AMD, and ARM.

meltdown spectre Google/Natascha Eibl

These new drivers include initial mitigations against one of two known Spectre variants, CVE-2017-5753. As far as the second Spectre flaw, “Nvidia’s initial analysis indicates that the Nvidia GPU Display Driver is potentially affected by this variant,” the company says. “Nvidia expects to work together with its ecosystem partners on future updates for this variant.”

Consumer graphics cards aren’t the only hardware being patched to fight Spectre. Nvidia’s GeForce, Quadro, NVS, and Tesla cards on the R384 driver branch have fixes available now. Updated drivers for GRID users and Tesla card on the R390 branch will become available later this month.

Nvidia hasn’t said if the driver updates will affect performance, and we haven’t had time to test the new release with CES running this week. These initial fixes may not move the needle much, though. In a detailed breakdown of how Spectre fixes can slow down older PCs, Microsoft said that the mitigations for the first Spectre exploit—the one Nvidia’s new drivers protect against—have “minimal performance impact.” But strengthening Windows and CPU firmware against the second Spectre flaw slows down performance. Nvidia’s future software patches might not suffer the same fate; we’ll need to keep an eye on the situation as new fixes become available.

You should update to Nvidia’s new drivers ASAP regardless, and make sure your antivirus suite is running strong. PCWorld’s guide to the best antivirus for Windows PCs can help if you need it.

You might also want to dive into PCWorld’s extensive coverage of these earth-shattering flaws, because there are other steps you should take to safeguard your computer right now. Our guide on how to protect your PC against Meltdown and Spectre walks you through the process, while our Meltdown and Spectre FAQ breaks down everything in clear, easy to read language. And yes, these CPU flaws affect phones and tablets too.

IDG Insider

PREVIOUS ARTICLE

«Newegg is selling Destiny 2 for $27

NEXT ARTICLE

Sorry, Huawei Mate 10 Pro, not even Wonder Woman can fight the U.S. carrier stronghold»
author_image
IDG Connect

IDG Connect tackles the tech stories that matter to you

Recommended for You

keri-allan

Latin America’s push towards digital transformation

Keri Allan looks at the latest trends and technologies

martin-veitch-thumbnail

Meeting Owl brings new wisdom to conferencing

Martin Veitch's inside track on today’s tech trends

phil-muncaster

A rare glimpse inside the Chinese cybercrime underground

Phil Muncaster reports on China and beyond

Our Case Studies

IDG Connect delivers full creative solutions to meet all your demand generatlon needs. These cover the full scope of options, from customized content and lead delivery through to fully integrated campaigns.

images

Our Marketing Research

Our in-house analyst and editorial team create a range of insights for the global marketing community. These look at IT buying preferences, the latest soclal media trends and other zeitgeist topics.

images

Poll

Should the government regulate Artificial Intelligence?