Description
NVIDIA UNIX graphics driver before 295.71 and before 304.32 allows local users to write to arbitrary physical memory locations and gain privileges by modifying the VGA window using /dev/nvidia0.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | nvidia-graphics-drivers | 304.37-1 | — |
| Debian 13 | nvidia-graphics-drivers | 304.37-1 | — |
| Debian 12 | nvidia-graphics-drivers | 304.37-1 | — |
References
- [oss-security] 20120801 CVE Request: NVidia Linux driver mailing-list
- [oss-security] 20120808 Re: CVE Request: NVidia Linux driver mailing-list
- http://nvidia.custhelp.com/app/answers/detail/a_id/3140
- 20120804 nvidia linux binary driver priv escalation exploit mailing-list
- GLSA-201304-01 vendor-advisory
- 20120801 nvidia linux binary driver priv escalation exploit mailing-list