How secure is the host operating system from the guest virtual machine's OS when using GPU passthrough (using the methods described here)?
If the guest is compromised, can it permanently infect the GPU and its firmware? If it's possible, what could this compromised GPU do?
- Even though VT-d/IOMMU is designed to securely contain devices to the virtual machine, could the guest use the GPU to compromise the host (OS or any other devices)?
If the GPU is suspected compromised, what should be the ideal course of action? If the computer's host OS is reinstalled, would the GPU be able to attack and infect it?
(Moved to separate question)
I'm looking for a general answer, but if it's relevant, assume Linux host with KVM and Windows guest.