Skip to content
OpenAdvisories
High · 7.8 CVE-2024-0077 EUVD-2024-15878GHSA-86pp-hjq5-9xjj

CVE

Published Mar 27, 2024 · Updated Aug 27, 2024 · Assigned by nvidia

Vendor: NVIDIA Product: vGPU driver, Cloud Gaming driver Package: nvidia-graphics-drivers-304 Package: nvidia-graphics-drivers-340 Package: nvidia-graphics-drivers-340-updates Package: nvidia-graphics-drivers-352 Package: nvidia-graphics-drivers-352-updates Package: nvidia-graphics-drivers-361 Package: nvidia-graphics-drivers-367 Package: nvidia-graphics-drivers-375 Package: nvidia-graphics-drivers-384 Package: nvidia-graphics-drivers-390 Package: nvidia-graphics-drivers-418-server Package: nvidia-graphics-drivers-430 Package: nvidia-graphics-drivers-435 Package: nvidia-graphics-drivers-440 Package: nvidia-graphics-drivers-440-server Package: nvidia-graphics-drivers-450 Package: nvidia-graphics-drivers-450-server Package: nvidia-graphics-drivers-455 Package: nvidia-graphics-drivers-460 Package: nvidia-graphics-drivers-460-server Package: nvidia-graphics-drivers-470 Package: nvidia-graphics-drivers-470-server Package: nvidia-graphics-drivers-495 Package: nvidia-graphics-drivers-510 Package: nvidia-graphics-drivers-510-server Package: nvidia-graphics-drivers-515 Package: nvidia-graphics-drivers-515-server Package: nvidia-graphics-drivers-520 Package: nvidia-graphics-drivers-530 Package: nvidia-graphics-drivers-535 Package: nvidia-graphics-drivers-535-server Ecosystem: Ubuntu

Description

NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin, where it allows a guest OS to allocate resources for which the guest OS is not authorized. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

Affected products

VendorProductAffectedFixed
nvidia vGPU driver, Cloud Gaming driver All versions prior to and including 16.3, 13.9, and all versions prior to and including the January 2024 release —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 24.04 LTS nvidia-graphics-drivers-470 +1 470.239.06-0ubuntu1 —
Ubuntu 22.04 LTS nvidia-graphics-drivers-390 +12 No fix yet —
Ubuntu 22.04 LTS nvidia-graphics-drivers-470 +1 470.239.06-0ubuntu0.22.04.1 —
Ubuntu 22.04 LTS nvidia-graphics-drivers-535 +1 535.161.07-0ubuntu0.22.04.1 —
Ubuntu 20.04 LTS nvidia-graphics-drivers-340 +15 No fix yet —
Ubuntu 20.04 LTS nvidia-graphics-drivers-470 +1 470.239.06-0ubuntu0.20.04.1 —
Ubuntu 20.04 LTS nvidia-graphics-drivers-535 +1 535.161.07-0ubuntu0.20.04.1 —
Ubuntu 18.04 LTS nvidia-graphics-drivers-340 +24 No fix yet —
Ubuntu 16.04 LTS nvidia-graphics-drivers-304 +2 No fix yet —
Show 2 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu Pro 20.04 LTS nvidia-graphics-drivers-450-server No fix yet —
Ubuntu Pro 18.04 LTS nvidia-graphics-drivers-450-server No fix yet —
Ubuntu Pro 18.04 LTS nvidia-graphics-drivers-470 +1 470.239.06-0ubuntu0.18.04.1 —

Advisories 1

References