Skip to content
OpenAdvisories
Unscored CVE-2018-6260 EUVD-2018-18021GHSA-ppf8-x3x5-v226

NVIDIA graphics driver contains a vulnerability that may allow access to application data processed on the GPU through a side channel expos…

Published Nov 13, 2018 · Updated Aug 5, 2024 · Assigned by nvidia

Description

NVIDIA graphics driver contains a vulnerability that may allow access to application data processed on the GPU through a side channel exposed by the GPU performance counters. Local user access is required. This is not a network or remote attack vector.

Affected products

VendorProductAffectedFixed
Nvidia GPU Graphics Driver N/A —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 nvidia-graphics-drivers 410.104-1 —
Debian 13 nvidia-graphics-drivers 410.104-1 —
Debian 12 nvidia-graphics-drivers 410.104-1 —
ReleasePackageFixed inAdvisory
Ubuntu 18.04 LTS nvidia-graphics-drivers-340 No fix yet —
Ubuntu 18.04 LTS nvidia-graphics-drivers-390 390.116-0ubuntu0.18.04.1 USN-3904-1
Ubuntu 16.04 LTS nvidia-graphics-drivers-304 +2 No fix yet —

Advisories 1

References