locked
[Known Issue] RemoteFX vGPU Disablement in July 14, 2020 Windows Update tracked by CVE-2020-1036 RRS feed

  • General discussion

  • Symptom:

    Error after 2020 July's update when starting VM with RemoteFX via Hyper-V Manager:

    1. An error occurred while attempting to start the selected virtual machine(s). %computername% fails to start.
    2. Failed to Power on with Error "insufficient system resources to complete the requested service;,
    3. The virtual machine cannot be started because all the RemoteFX-capable GPUs are disabled in Hyper-V Manager. You must enable at least one GPI

     

    More information:

    RemoteFX vGPU feature was removed with the release of Windows 10, version 1809 and Windows Server 2019. Reference "Features we removed in this release" for detail information:

    https://docs.microsoft.com/en-us/windows-server/get-started-19/removed-features-19#features-we-removed-in-this-release

     

    RemoteFX vGPU feature was planned for replacement starting with Windows Server, version 1803. Reference below link for detail information:

    https://docs.microsoft.com/en-us/windows-server/get-started/windows-server-1803-removed-features

     

    Due to security vulnerabilities identified by a security researcher, RemoteFX vGPU feature is being disabled for all users by the 2020 July's update and all superseding Windows Updates before.  Affected operating system:

    Windows 7.0 SP1

    Windows Server 2012 

    Windows 8.1  & Windows Server 2012 R2

    Windows 10 RTM

    Windows 10 1607 & Windows Server 2016

    Windows 10 1703

    Windows 10 1709

    Windows 10 1803

     

    Workaround:

    1. Consider using an alternative vGPU technology. Secure GPU virtualization is available through Discrete Device Assignment (DDA) in Windows Server LTSC releases (Windows Server 2016, Windows Server 2019) and Windows Server SAC releases (Windows Server, version 1803 and later versions).
    2. Manually re-enable RemoteFX vGPU feature. However, it is not recommended sue to security consideration. And this feature will eventually be completely deleted.

     

    Reference "Update to disable and remove the RemoteFX vGPU component in Windows" for detail information:

    https://support.microsoft.com/en-us/help/4570006/update-to-disable-and-remove-the-remotefx-vgpu-component

     

    Reference "CVE-2020-1036 | Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability" for detail information:

    https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1036


    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Sunday, July 19, 2020 1:58 PM