Description
NVIDIA GPU Display Driver for Linux, all versions, contains a vulnerability in the kernel mode layer (nvidia.ko) in which it does not completely honor operating system file system permissions to provide GPU device-level isolation, which may lead to denial of service or information disclosure.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| NVIDIA | NVIDIA GPU Display Driver | All | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | nvidia-graphics-drivers | 460.32.03-1 | — |
| Debian 13 | nvidia-graphics-drivers | 460.32.03-1 | — |
| Debian 12 | nvidia-graphics-drivers | 460.32.03-1 | — |
| Debian 9 | nvidia-graphics-drivers | 390.144-1~deb9u1 | DLA-2888-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 20.04 LTS | linux | 5.4.0-60.67 | USN-4689-2 |
| Ubuntu 20.04 LTS | linux-aws | 5.4.0-1035.37 | USN-4689-2 |
| Ubuntu 20.04 LTS | linux-azure | 5.4.0-1036.38 | USN-4689-2 |
| Ubuntu 20.04 LTS | linux-gcp | 5.4.0-1034.37 | USN-4689-2 |
| Ubuntu 20.04 LTS | linux-hwe-5.8 | 5.8.0-36.40~20.04.1 | USN-4689-2 |
| Ubuntu 20.04 LTS | linux-oem-5.6 | 5.6.0-1042.46 | USN-4689-2 |
| Ubuntu 20.04 LTS | linux-oracle | 5.4.0-1035.38 | USN-4689-2 |
| Ubuntu 20.04 LTS | nvidia-graphics-drivers-390 | 390.141-0ubuntu0.20.04.1 | USN-4689-1 |
| Ubuntu 20.04 LTS | nvidia-graphics-drivers-418-server | 418.181.07-0ubuntu0.20.04.1 | — |
| Ubuntu 20.04 LTS | nvidia-graphics-drivers-450 +1 | 450.102.04-0ubuntu0.20.04.1 | USN-4689-1 |
| Ubuntu 20.04 LTS | nvidia-graphics-drivers-455 +1 | No fix yet | — |
| Ubuntu 20.04 LTS | nvidia-graphics-drivers-460 | 460.32.03-0ubuntu0.20.04.1 | USN-4689-1 |
| Ubuntu 18.04 LTS | linux | 4.15.0-130.134 | USN-4689-2 |
| Ubuntu 18.04 LTS | linux-aws | 4.15.0-1092.98 | USN-4689-2 |
| Ubuntu 18.04 LTS | linux-aws-5.4 | 5.4.0-1035.37~18.04.1 | USN-4689-2 |
| Ubuntu 18.04 LTS | linux-azure-4.15 | 4.15.0-1104.116 | USN-4689-2 |
| Ubuntu 18.04 LTS | linux-azure-5.4 | 5.4.0-1036.38~18.04.1 | USN-4689-2 |
| Ubuntu 18.04 LTS | linux-gcp-5.4 | 5.4.0-1034.37~18.04.1 | USN-4689-2 |
| Ubuntu 18.04 LTS | linux-hwe-5.4 | 5.4.0-60.67~18.04.1 | USN-4689-2 |
| Ubuntu 18.04 LTS | linux-oracle | 4.15.0-1063.70 | USN-4689-2 |
| Ubuntu 18.04 LTS | linux-oracle-5.4 | 5.4.0-1035.38~18.04.1 | USN-4689-2 |
| Ubuntu 18.04 LTS | nvidia-graphics-drivers-390 | 390.141-0ubuntu0.18.04.1 | USN-4689-1 |
| Ubuntu 18.04 LTS | nvidia-graphics-drivers-418-server | 418.181.07-0ubuntu0.18.04.1 | — |
| Ubuntu 18.04 LTS | nvidia-graphics-drivers-450 +1 | 450.102.04-0ubuntu0.18.04.1 | USN-4689-1 |
| Ubuntu 18.04 LTS | nvidia-graphics-drivers-455 +1 | No fix yet | — |
| Ubuntu 18.04 LTS | nvidia-graphics-drivers-460 | 460.32.03-0ubuntu0.18.04.1 | USN-4689-1 |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
GitHub 1 repository
-
pokerfaceSad/CVE-2021-1056 ★ 16 · Jan 8, 2021
PoC for CVE-2021-1056, related to GPU Container Security
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Advisories 4
- USN-4689-2 linux, linux-aws, linux-aws-5.4, linux-azure, linux-azure-4.15, linux-azure-5.4, linux-gcp, linux-gcp-5.4, linux-hwe-5.4, linux-hwe-5.8, linux-oem-5.6, linux-oracle, linux-oracle-5.4 vulnerabilities Ubuntu Security Notices (USN) · Apr 22, 2026
- USN-4689-1 nvidia-graphics-drivers-390, nvidia-graphics-drivers-450, nvidia-graphics-drivers-460 vulnerabilities Ubuntu Security Notices (USN) · Apr 22, 2026
- DLA-2888-1 nvidia-graphics-drivers - security update Debian Security (DSA / DLA) · Mar 9, 2026
- WID-SEC-2023-2534 Nvidia Treiber: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 3, 2023