Description
Buffer overflow in the NVIDIA GPU driver before 304.88, 310.x before 310.44, and 313.x before 313.30 for the X Window System on UNIX, when NoScanout mode is enabled, allows remote authenticated users to execute arbitrary code via a large ARGB cursor.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | nvidia-graphics-drivers | 304.88-1 | — |
| Debian 13 | nvidia-graphics-drivers | 304.88-1 | — |
| Debian 12 | nvidia-graphics-drivers | 304.88-1 | — |
References
- GLSA-201304-01 vendor-advisory
- http://www.nvidia.com/object/product-security.html
- http://nvidia.custhelp.com/app/answers/detail/a_id/3290
- VU#771620 third-party-advisory