DET-G6: GPU driver or VBIOS changed¶
A driver or VBIOS measurement differs from the previous capture. Expected after a planned update; otherwise a downgrade or swap of the measured firmware.
| Property | Value |
|---|---|
| Severity | medium |
| Platform | NVIDIA GPU CC |
| Group | tee |
| Log source | GPU evidence capture |
| Related check | GPUCC-RIM-01: Verification pins RIM golden measurements (driver + VBIOS) |
Fires when¶
GPU driver or VBIOS version changed versus the signed RIM
How it runs¶
untrust detect --platform gpu-cc compares successive GPU evidence captures, each passed with --capture.
A match is a detection event with this rule's ID. Upload it to the console to alert on it; see Runtime detections.