Summary
Ein lokaler Angreifer kann mehrere Schwachstellen in Nvidia Grafiktreibern ausnutzen, um seine Privilegien zu erweitern, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, einen Denial-of-Service-Zustand zu verursachen oder beliebigen Code auszuführen.
Product
NVidia ist ein Hersteller von Grafikkarten.
Vulnerabilities 10
-
High 7.8
CVE
NVIDIA vGPU software for Linux contains a vulnerability in the Virtual GPU Manager, where the guest OS could execute privileged operations. A successful exploit of this vulnerability might lead to information disclosure, data tampering, escalation of privileg…
-
High 7.8
CVE
NVIDIA GPU Display Driver for Windows contains a vulnerability where the information from a previous client or another process could be disclosed. A successful exploit of this vulnerability might lead to code execution, information disclosure, or data tamperi…
-
High 7.8
CVE
NVIDIA GPU driver for Windows and Linux contains a vulnerability where a user can cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and d…
-
High 7.8
CVE
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where a user can cause an untrusted pointer dereference by executing a driver API. A successful exploit of this vulnerability might lead to denial of service, information disclosure, and…
-
High 7.8
CVE
NVIDIA vGPU software for Linux contains a vulnerability in the Virtual GPU Manager, where the guest OS could cause buffer overrun in the host. A successful exploit of this vulnerability might lead to information disclosure, data tampering, escalation of privi…
-
Medium 6.5
CVE
NVIDIA GPU software for Linux contains a vulnerability where it can expose sensitive information to an actor that is not explicitly authorized to have access to that information. A successful exploit of this vulnerability might lead to information disclosure.
-
Medium 6.3
CVE
NVIDIA vGPU software for Windows and Linux contains a vulnerability where unprivileged users could execute privileged operations on the host. A successful exploit of this vulnerability might lead to data tampering, escalation of privileges, and denial of serv…
-
Medium 5.5
CVE
NVIDIA vGPU software for Linux contains a vulnerability where the software can dereference a NULL pointer. A successful exploit of this vulnerability might lead to denial of service and undefined behavior in the vGPU plugin.
-
Medium 5.5
CVE
NVIDIA GPU Driver for Windows and Linux contains a vulnerability where an improper check or improper handling of exception conditions might lead to denial of service.
-
Medium 5.5
CVE
NVIDIA vGPU software for Linux contains a vulnerability in the Virtual GPU Manager, where an untrusted guest VM can cause improper control of the interaction frequency in the host. A successful exploit of this vulnerability might lead to denial of service.
Revision history
-
#8
Neue Updates von Debian aufgenommen
-
#7
Neue Updates von SUSE aufgenommen
-
#6
Neue Updates von SUSE aufgenommen
-
#5
Neue Updates von HP aufgenommen
-
#4
Neue Updates von SUSE aufgenommen
-
#3
Neue Updates von SUSE und LENOVO aufgenommen
-
#2
Neue Updates von Dell aufgenommen
-
#1
Initiale Fassung
References
-
NVIDIA GPU Display Driver Security Bulletin June 2024 vom 2024-06-06
https://nvidia.custhelp.com/app/answers/detail/a_id/5551
-
Dell Security Advisory DSA-2024-203 vom 2024-06-08
https://www.dell.com/support/kbdoc/de-de/000224676/dsa-2024-203
-
SUSE Security Update SUSE-SU-2024:1990-1 vom 2024-06-11
https://lists.suse.com/pipermail/sle-security-updates/2024-June/018693.html
-
Lenovo Security Advisory LEN-163020 vom 2024-06-11
https://support.lenovo.com/us/en/product_security/LEN-163020
-
SUSE Security Update SUSE-SU-2024:2005-1 vom 2024-06-12
https://lists.suse.com/pipermail/sle-security-updates/2024-June/018708.html
-
HP Security Bulletin HPSBHF03952 vom 2024-06-07
https://support.hp.com/us-en/document/ish_10842607-10842633-16/HPSBHF03952
-
SUSE Security Update SUSE-SU-2024:2585-1 vom 2024-07-22
https://lists.suse.com/pipermail/sle-security-updates/2024-July/019009.html
-
SUSE Security Update SUSE-SU-2025:20108-1 vom 2025-06-04
https://lists.suse.com/pipermail/sle-security-updates/2025-June/021213.html
-
Debian Security Advisory DLA-4752 vom 2026-08-24
https://lists.debian.org/debian-lts-announce/2026/08/msg00044.html