Skip to content
OpenAdvisories

Description

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (nvidia.ko), where uncontrolled resource consumption can be triggered by an unprivileged regular user, which may lead to denial of service.

Affected products

VendorProductAffectedFixed
NVIDIA NVIDIA Virtual GPU Software and NVIDIA Cloud Gaming vGPU version 14.x (prior to 14.1), version 13.x (prior to 13.3) and version 11.x (prior 11.8). —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 nvidia-graphics-drivers 470.129.06-1 —
Debian 13 nvidia-graphics-drivers 470.129.06-1 —
Debian 12 nvidia-graphics-drivers +1 470.129.06-1 —
ReleasePackageFixed inAdvisory
Ubuntu 22.04 LTS nvidia-graphics-drivers-390 390.151-0ubuntu0.22.04.1 —
Ubuntu 22.04 LTS nvidia-graphics-drivers-430 +5 No fix yet —
Ubuntu 22.04 LTS nvidia-graphics-drivers-450-server 450.191.01-0ubuntu0.22.04.1 —
Ubuntu 22.04 LTS nvidia-graphics-drivers-470 +1 470.129.06-0ubuntu0.22.04.1 —
Ubuntu 22.04 LTS nvidia-graphics-drivers-510 +1 510.73.05-0ubuntu0.22.04.1 —
Ubuntu 20.04 LTS nvidia-graphics-drivers-340 +9 No fix yet —
Ubuntu 20.04 LTS nvidia-graphics-drivers-390 390.151-0ubuntu0.20.04.1 —
Ubuntu 20.04 LTS nvidia-graphics-drivers-450-server 450.191.01-0ubuntu0.20.04.1 —
Ubuntu 20.04 LTS nvidia-graphics-drivers-470 +1 470.129.06-0ubuntu0.20.04.1 —
Ubuntu 20.04 LTS nvidia-graphics-drivers-510 +1 510.73.05-0ubuntu0.20.04.1 —
Ubuntu 18.04 LTS nvidia-graphics-drivers-340 +9 No fix yet —
Ubuntu 18.04 LTS nvidia-graphics-drivers-390 390.151-0ubuntu0.18.04.1 —
Ubuntu 18.04 LTS nvidia-graphics-drivers-450-server 450.191.01-0ubuntu0.18.04.1 —
Ubuntu 18.04 LTS nvidia-graphics-drivers-470 +1 470.129.06-0ubuntu0.18.04.1 —
Ubuntu 18.04 LTS nvidia-graphics-drivers-510 +1 510.73.05-0ubuntu0.18.04.1 —
Ubuntu 16.04 LTS nvidia-graphics-drivers-304 +2 No fix yet —

Advisories 1

References