Skip to content
OpenAdvisories
Medium · 6.5 CVE-2024-0078 EUVD-2024-15879GHSA-hxq8-x335-p47g

CVE

Published Mar 27, 2024 · Updated Apr 8, 2025 · Assigned by nvidia

Vendor: NVIDIA Product: GPU Display driver, vGPU driver, Cloud Gaming driver Package: nvidia-graphics-drivers Package: nvidia-graphics-drivers-304 Package: nvidia-graphics-drivers-340 Package: nvidia-graphics-drivers-340-updates Package: nvidia-graphics-drivers-352 Package: nvidia-graphics-drivers-352-updates Package: nvidia-graphics-drivers-361 Package: nvidia-graphics-drivers-367 Package: nvidia-graphics-drivers-375 Package: nvidia-graphics-drivers-384 Package: nvidia-graphics-drivers-390 Package: nvidia-graphics-drivers-418-server Package: nvidia-graphics-drivers-430 Package: nvidia-graphics-drivers-435 Package: nvidia-graphics-drivers-440 Package: nvidia-graphics-drivers-440-server Package: nvidia-graphics-drivers-450 Package: nvidia-graphics-drivers-450-server Package: nvidia-graphics-drivers-455 Package: nvidia-graphics-drivers-460 Package: nvidia-graphics-drivers-460-server Package: nvidia-graphics-drivers-470 Package: nvidia-graphics-drivers-470-server Package: nvidia-graphics-drivers-495 Package: nvidia-graphics-drivers-510 Package: nvidia-graphics-drivers-510-server Package: nvidia-graphics-drivers-515 Package: nvidia-graphics-drivers-515-server Package: nvidia-graphics-drivers-520 Package: nvidia-graphics-drivers-530 Package: nvidia-graphics-drivers-535 Package: nvidia-graphics-drivers-535-server Package: nvidia-graphics-drivers-tesla Package: nvidia-graphics-drivers-tesla-470 Package: nvidia-open-gpu-kernel-modules Ecosystem: Debian Ecosystem: Ubuntu

Description

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a user in a guest can cause a NULL-pointer dereference in the host, which may lead to denial of service.

Affected products

VendorProductAffectedFixed
nvidia GPU Display driver, vGPU driver, Cloud Gaming driver All versions prior to and including 16.3, 13.9, and all versions prior to and including the January 2024 release —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 nvidia-graphics-drivers 550.144.03-1 —
Debian 13 nvidia-graphics-drivers +1 550.144.03-1 —
Debian 12 nvidia-graphics-drivers +2 No fix yet —
Debian 12 nvidia-graphics-drivers-tesla-470 470.239.06-1~deb12u1 —

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 24.04 LTS nvidia-graphics-drivers-470 +1 470.239.06-0ubuntu1 —
Ubuntu 22.04 LTS nvidia-graphics-drivers-390 +12 No fix yet —
Ubuntu 22.04 LTS nvidia-graphics-drivers-470 +1 470.239.06-0ubuntu0.22.04.1 —
Ubuntu 22.04 LTS nvidia-graphics-drivers-535 +1 535.161.07-0ubuntu0.22.04.1 —
Ubuntu 20.04 LTS nvidia-graphics-drivers-340 +15 No fix yet —
Ubuntu 20.04 LTS nvidia-graphics-drivers-470 +1 470.239.06-0ubuntu0.20.04.1 —
Ubuntu 20.04 LTS nvidia-graphics-drivers-535 +1 535.161.07-0ubuntu0.20.04.1 —
Ubuntu 18.04 LTS nvidia-graphics-drivers-340 +24 No fix yet —
Ubuntu 16.04 LTS nvidia-graphics-drivers-304 +2 No fix yet —
Show 2 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu Pro 20.04 LTS nvidia-graphics-drivers-450-server No fix yet —
Ubuntu Pro 18.04 LTS nvidia-graphics-drivers-450-server No fix yet —
Ubuntu Pro 18.04 LTS nvidia-graphics-drivers-470 +1 470.239.06-0ubuntu0.18.04.1 —

Advisories 1

References