Hyper-V data security kernel access programs

Question

Hello, I'm not the brightest one when it comes to computers and I was thinking about this:
Say I want to play a game that has an anti-cheat with kernel level access, but I do not want to run such a program on my host-pc with all my personal data. Could I run Hyper-V with GPU passthrough to play this game in a Virtual machine, and not have this game be able to access all my data? In other words: could a kernel level access program, running inside Hyper-V (with GPU passthrough), access personal data on my host machine? I understand nothing is waterproof, but would it be a safe enough guess that this would work?

Answer 1

Hi The Engineer,

Hope you're doing well.

1. Hyper-V provides strong isolation between the host and guest VMs. The VM runs in a completely separate environment, which helps to limit the reach of any software, including kernel-level anti-cheat mechanisms, to the VM itself.
2. GPU Passthrough feature allows the VM to have direct access to a physical GPU, which is essential for gaming performance. However, configuring GPU passthrough can be complex and might require specific hardware and BIOS/UEFI settings.
3. While the anti-cheat software running in the VM will have kernel-level access within that VM, it should not have direct access to the host system’s resources or data. This reduces the risk of the anti-cheat software affecting or accessing your personal data on the host.
4. There is always a theoretical risk that sophisticated malware could escape from a VM to the host, especially if there are unpatched vulnerabilities in the hypervisor or misconfigurations.
5. Running games in a VM with GPU passthrough can introduce some overhead, which might slightly affect performance compared to running the game natively on the host machine. However, for many games, the performance impact is minimal if the setup is done correctly.
6. Some anti-cheat systems might detect the virtualized environment and could potentially block the game from running. It’s crucial to verify whether the specific anti-cheat software used by your game supports running in a VM with GPU passthrough.

Best Regards,

Ian Xue

---

If the Answer is helpful, please click "Accept Answer" and upvote it.

Answer 2

Running a game with an anti-cheat program that has kernel-level access inside a virtual machine with GPU passthrough can help protect your personal data on the host machine. The virtual machine is isolated from the host machine, and the anti-cheat program running inside the virtual machine should not have access to the host machine's data. However, it is important to note that this is not a foolproof solution and there is still a risk of the anti-cheat program being able to access the host machine's data. It is always recommended to take additional security measures to protect your personal data.

References:

• Discrete Device Assignment -- GPUs
• Virtualization applications don't work together with Hyper-V, Device Guard, and Credential Guard
• Azure guidance for secure isolation - Logical isolation considerations

---