Skip to content
OpenAdvisories
Medium · 5.0 CVE-2012-0953 EUVD-2012-0976GHSA-hrhp-pg6r-2xqh

Kernel heap contents leak race in ioctl handler

Published May 8, 2020 · Updated Sep 17, 2024 · Assigned by canonical

Description

A race condition was discovered in the Linux drivers for Nvidia graphics which allowed an attacker to exfiltrate kernel memory to userspace. This issue was fixed in version 295.53.

Affected products

VendorProductAffectedFixed
nvidia graphics drivers unspecified – < 295.53 295.53

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 nvidia-graphics-drivers 295.53-1 —
Debian 13 nvidia-graphics-drivers 295.53-1 —
Debian 12 nvidia-graphics-drivers 295.53-1 —

References