Skip to content
OpenAdvisories
Low · 2.0 CVE-2023-0195 EUVD-2023-12284GHSA-37vv-65j3-r854

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer driver nvlddmkm.sys, where an can cause CWE-1284, w…

Published Apr 1, 2023 · Updated Feb 13, 2025 · Assigned by nvidia

Vendor: NVIDIA Product: vGPU software (guest driver - Windows), NVIDIA Cloud Gaming (guest driver - Windows) Package: nvidia-graphics-drivers Package: nvidia-graphics-drivers-304 Package: nvidia-graphics-drivers-340 Package: nvidia-graphics-drivers-384 Package: nvidia-graphics-drivers-390 Package: nvidia-graphics-drivers-418-server Package: nvidia-graphics-drivers-430 Package: nvidia-graphics-drivers-435 Package: nvidia-graphics-drivers-440 Package: nvidia-graphics-drivers-440-server Package: nvidia-graphics-drivers-450 Package: nvidia-graphics-drivers-450-server Package: nvidia-graphics-drivers-455 Package: nvidia-graphics-drivers-460 Package: nvidia-graphics-drivers-460-server Package: nvidia-graphics-drivers-470 Package: nvidia-graphics-drivers-470-server Package: nvidia-graphics-drivers-510 Package: nvidia-graphics-drivers-515 Package: nvidia-graphics-drivers-515-server Package: nvidia-graphics-drivers-520 Package: nvidia-graphics-drivers-525 Package: nvidia-graphics-drivers-525-server Package: nvidia-graphics-drivers-tesla Package: nvidia-graphics-drivers-tesla-470 Package: nvidia-open-gpu-kernel-modules Platform: Windows Ecosystem: Debian Ecosystem: Ubuntu

Description

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer driver nvlddmkm.sys, where an can cause CWE-1284,
which may lead to hypothetical Information leak of unimportant data such as local variable data of the driver

Affected products

VendorProductAffectedFixed
NVIDIA vGPU software (guest driver - Windows), NVIDIA Cloud Gaming (guest driver - Windows) All versions prior to and including 15.1, 13.6, 11.11, and all versions prior to and including February 2023 release —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 nvidia-graphics-drivers 525.105.17-1 —
Debian 13 nvidia-graphics-drivers +1 525.105.17-1 —
Debian 12 nvidia-graphics-drivers +2 525.105.17-1 —
Debian 12 nvidia-graphics-drivers-tesla-470 470.182.03-1 —

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 22.04 LTS nvidia-graphics-drivers-390 +8 No fix yet —
Ubuntu 22.04 LTS nvidia-graphics-drivers-450-server 450.236.01-0ubuntu0.22.04.1 —
Ubuntu 22.04 LTS nvidia-graphics-drivers-470 +1 470.182.03-0ubuntu0.22.04.1 —
Ubuntu 22.04 LTS nvidia-graphics-drivers-515 +1 515.105.01-0ubuntu0.22.04.1 —
Ubuntu 22.04 LTS nvidia-graphics-drivers-525 +1 525.105.17-0ubuntu0.22.04.1 —
Ubuntu 20.04 LTS nvidia-graphics-drivers-340 +12 No fix yet —
Ubuntu 20.04 LTS nvidia-graphics-drivers-450-server 450.236.01-0ubuntu0.20.04.1 —
Ubuntu 20.04 LTS nvidia-graphics-drivers-470 +1 470.182.03-0ubuntu0.20.04.1 —
Ubuntu 20.04 LTS nvidia-graphics-drivers-515 +1 515.105.01-0ubuntu0.20.04.1 —
Ubuntu 20.04 LTS nvidia-graphics-drivers-525 +1 525.105.17-0ubuntu0.20.04.1 —
Ubuntu 18.04 LTS nvidia-graphics-drivers-340 +12 No fix yet —
Ubuntu 18.04 LTS nvidia-graphics-drivers-450-server 450.236.01-0ubuntu0.18.04.1 —
Ubuntu 18.04 LTS nvidia-graphics-drivers-470 +1 470.182.03-0ubuntu0.18.04.1 —
Ubuntu 18.04 LTS nvidia-graphics-drivers-515 +1 515.105.01-0ubuntu0.18.04.1 —
Ubuntu 18.04 LTS nvidia-graphics-drivers-525 +1 525.105.17-0ubuntu0.18.04.1 —
Ubuntu 16.04 LTS nvidia-graphics-drivers-304 +2 No fix yet —

Advisories 1

References