Skip to content
OpenAdvisories
High · 7.1 CVE-2023-25516 EUVD-2023-29468GHSA-9p48-jjr7-4fh3

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where an unprivileged user can cause an integer over…

Published Jul 3, 2023 · Updated Oct 24, 2024 · Assigned by nvidia

Vendor: NVIDIA Product: GPU Display Driver for Linux Package: nvidia-graphics-drivers Package: nvidia-graphics-drivers-304 Package: nvidia-graphics-drivers-340 Package: nvidia-graphics-drivers-390 Package: nvidia-graphics-drivers-418-server Package: nvidia-graphics-drivers-430 Package: nvidia-graphics-drivers-435 Package: nvidia-graphics-drivers-440 Package: nvidia-graphics-drivers-440-server Package: nvidia-graphics-drivers-450 Package: nvidia-graphics-drivers-450-server Package: nvidia-graphics-drivers-455 Package: nvidia-graphics-drivers-460 Package: nvidia-graphics-drivers-460-server Package: nvidia-graphics-drivers-470 Package: nvidia-graphics-drivers-470-server Package: nvidia-graphics-drivers-510 Package: nvidia-graphics-drivers-515 Package: nvidia-graphics-drivers-515-server Package: nvidia-graphics-drivers-520 Package: nvidia-graphics-drivers-525 Package: nvidia-graphics-drivers-525-server Package: nvidia-graphics-drivers-530 Package: nvidia-graphics-drivers-535 Package: nvidia-graphics-drivers-tesla Package: nvidia-graphics-drivers-tesla-470 Package: nvidia-open-gpu-kernel-modules Platform: Linux Ecosystem: Debian Ecosystem: Ubuntu

Description

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where an unprivileged user can cause an integer overflow, which may lead to information disclosure and denial of service.

Affected products

VendorProductAffectedFixed
NVIDIA GPU Display Driver for Linux All versions prior to and including 15.2, 13.7, and 11.12, and all versions prior to and including the May 2023 release —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 nvidia-graphics-drivers 525.125.06-1 —
Debian 13 nvidia-graphics-drivers +1 525.125.06-1 —
Debian 12 nvidia-graphics-drivers +2 525.125.06-1~deb12u1 —
Debian 12 nvidia-graphics-drivers-tesla-470 470.199.02-1~deb12u1 —

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 22.04 LTS nvidia-graphics-drivers-390 +11 No fix yet —
Ubuntu 22.04 LTS nvidia-graphics-drivers-450-server 450.248.02-0ubuntu0.22.04.1 —
Ubuntu 22.04 LTS nvidia-graphics-drivers-470 +1 470.199.02-0ubuntu0.22.04.1 —
Ubuntu 22.04 LTS nvidia-graphics-drivers-525 +1 525.125.06-0ubuntu0.22.04.1 —
Ubuntu 22.04 LTS nvidia-graphics-drivers-535 535.54.03-0ubuntu0.22.04.1 —
Ubuntu 20.04 LTS nvidia-graphics-drivers-340 +15 No fix yet —
Ubuntu 20.04 LTS nvidia-graphics-drivers-450-server 450.248.02-0ubuntu0.20.04.1 —
Ubuntu 20.04 LTS nvidia-graphics-drivers-470 +1 470.199.02-0ubuntu0.20.04.1 —
Ubuntu 20.04 LTS nvidia-graphics-drivers-525 +1 525.125.06-0ubuntu0.20.04.1 —
Ubuntu 20.04 LTS nvidia-graphics-drivers-535 535.54.03-0ubuntu0.20.04.3 —
Ubuntu 18.04 LTS nvidia-graphics-drivers-340 +15 No fix yet —
Ubuntu 16.04 LTS nvidia-graphics-drivers-304 +1 No fix yet —
Show 1 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu Pro 18.04 LTS nvidia-graphics-drivers-470 +4 No fix yet —

Advisories 1

References