Skip to content
OpenAdvisories

Description

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where an input index is not validated, which may lead to buffer overrun, which in turn may cause data tampering, information disclosure, or denial of service.

Affected products

VendorProductAffectedFixed
NVIDIA vGPU software (Virtual GPU Manager), NVIDIA Cloud Gaming (Virtual GPU Manager) All versions prior to and including 14.2, 13.4, and 11.9, and all versions prior to the November 2022 release —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 nvidia-graphics-drivers 510.108.03-1 —
Debian 13 nvidia-graphics-drivers 510.108.03-1 —
Debian 12 nvidia-graphics-drivers +1 510.108.03-1 —
Debian 12 nvidia-graphics-drivers-tesla-470 470.161.03-1 —
ReleasePackageFixed inAdvisory
Ubuntu 22.04 LTS nvidia-graphics-drivers-430 +5 No fix yet —
Ubuntu 22.04 LTS nvidia-graphics-drivers-450-server 450.216.04-0ubuntu0.22.04.1 —
Ubuntu 22.04 LTS nvidia-graphics-drivers-470 +1 470.161.03-0ubuntu0.22.04.1 —
Ubuntu 22.04 LTS nvidia-graphics-drivers-510 510.108.03-0ubuntu0.22.04.1 —
Ubuntu 20.04 LTS nvidia-graphics-drivers-340 +9 No fix yet —
Ubuntu 20.04 LTS nvidia-graphics-drivers-450-server 450.216.04-0ubuntu0.20.04.1 —
Ubuntu 20.04 LTS nvidia-graphics-drivers-470 +1 470.161.03-0ubuntu0.20.04.1 —
Ubuntu 20.04 LTS nvidia-graphics-drivers-510 510.108.03-0ubuntu0.20.04.1 —
Ubuntu 18.04 LTS nvidia-graphics-drivers-340 +9 No fix yet —
Ubuntu 18.04 LTS nvidia-graphics-drivers-450-server 450.216.04-0ubuntu0.18.04.1 —
Ubuntu 18.04 LTS nvidia-graphics-drivers-470 +1 470.161.03-0ubuntu0.18.04.1 —
Ubuntu 18.04 LTS nvidia-graphics-drivers-510 510.108.03-0ubuntu0.18.04.1 —
Ubuntu 16.04 LTS nvidia-graphics-drivers-304 +2 No fix yet —

Advisories 1

References