Skip to content
OpenAdvisories
High · 7.8 CVE-2024-0090 EUVD-2024-15891

CVE

Published Jun 13, 2024 · Updated Aug 1, 2024 · Assigned by nvidia

Vendor: NVIDIA Product: GPU display driver, vGPU software, and Cloud Gaming Package: nvidia-graphics-drivers Package: nvidia-graphics-drivers-304 Package: nvidia-graphics-drivers-340 Package: nvidia-graphics-drivers-340-updates Package: nvidia-graphics-drivers-352 Package: nvidia-graphics-drivers-352-updates Package: nvidia-graphics-drivers-361 Package: nvidia-graphics-drivers-367 Package: nvidia-graphics-drivers-375 Package: nvidia-graphics-drivers-384 Package: nvidia-graphics-drivers-390 Package: nvidia-graphics-drivers-418-server Package: nvidia-graphics-drivers-430 Package: nvidia-graphics-drivers-435 Package: nvidia-graphics-drivers-440 Package: nvidia-graphics-drivers-440-server Package: nvidia-graphics-drivers-450 Package: nvidia-graphics-drivers-450-server Package: nvidia-graphics-drivers-455 Package: nvidia-graphics-drivers-460 Package: nvidia-graphics-drivers-460-server Package: nvidia-graphics-drivers-470 Package: nvidia-graphics-drivers-470-server Package: nvidia-graphics-drivers-495 Package: nvidia-graphics-drivers-510 Package: nvidia-graphics-drivers-510-server Package: nvidia-graphics-drivers-515 Package: nvidia-graphics-drivers-515-server Package: nvidia-graphics-drivers-520 Package: nvidia-graphics-drivers-525 Package: nvidia-graphics-drivers-525-server Package: nvidia-graphics-drivers-530 Package: nvidia-graphics-drivers-535 Package: nvidia-graphics-drivers-535-server Package: nvidia-graphics-drivers-tesla Package: nvidia-graphics-drivers-tesla-470 Package: nvidia-open-gpu-kernel-modules Ecosystem: Debian Ecosystem: Ubuntu

Description

NVIDIA GPU driver for Windows and Linux contains a vulnerability where a user can cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

Affected products

VendorProductAffectedFixed
nvidia GPU display driver, vGPU software, and Cloud Gaming All versions up to and including 17.1, 16.5, 13.10, and the April 2024 release —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 nvidia-graphics-drivers 535.183.01-1 —
Debian 13 nvidia-graphics-drivers +1 535.183.01-1 —
Debian 12 nvidia-graphics-drivers +1 535.183.01-1~deb12u1 —
Debian 12 nvidia-graphics-drivers-tesla No fix yet —
Debian 12 nvidia-graphics-drivers-tesla-470 470.256.02-1~deb12u1 —
ReleasePackageFixed inAdvisory
Ubuntu 24.04 LTS nvidia-graphics-drivers-470 +1 470.256.02-0ubuntu0.24.04.1 —
Ubuntu 24.04 LTS nvidia-graphics-drivers-535 +1 535.183.01-0ubuntu0.24.04.1 —
Ubuntu 22.04 LTS nvidia-graphics-drivers-390 +12 No fix yet —
Ubuntu 22.04 LTS nvidia-graphics-drivers-470 +1 470.256.02-0ubuntu0.22.04.1 —
Ubuntu 22.04 LTS nvidia-graphics-drivers-535 +1 535.183.01-0ubuntu0.22.04.1 —
Ubuntu 20.04 LTS nvidia-graphics-drivers-340 +15 No fix yet —
Ubuntu 20.04 LTS nvidia-graphics-drivers-470 +1 470.256.02-0ubuntu0.20.04.1 —
Ubuntu 20.04 LTS nvidia-graphics-drivers-535 +1 535.183.01-0ubuntu0.20.04.1 —
Ubuntu 18.04 LTS nvidia-graphics-drivers-340 +24 No fix yet —
Ubuntu 16.04 LTS nvidia-graphics-drivers-304 +2 No fix yet —
Show 2 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu Pro 20.04 LTS nvidia-graphics-drivers-450-server No fix yet —
Ubuntu Pro 18.04 LTS nvidia-graphics-drivers-470 +4 No fix yet —
ReleasePackageFixed inAdvisory
SLES 15 SP6 nvidia-open-driver-G06-signed +1 550.100-150600.3.7.1 SUSE-SU-2024:2585-1
SLES 15 SP6 nvidia-open-driver-G06-signed-cuda +1 555.42.06-150600.3.7.1 SUSE-SU-2024:2585-1
SLES 15 SP5 kernel-firmware-nvidia-gspx-G06 550.90.07-150500.11.29.1 SUSE-SU-2024:1990-1
SLES 15 SP5 nvidia-open-driver-G06-signed 550.90.07-150500.3.47.1 SUSE-SU-2024:1990-1
SLES 15 SP4 kernel-firmware-nvidia-gspx-G06 550.90.07-150400.9.33.1 SUSE-SU-2024:2005-1
SLES 15 SP4 nvidia-open-driver-G06-signed 550.90.07-150400.9.62.1 SUSE-SU-2024:2005-1
Show 8 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES for SAP 15 SP4 kernel-firmware-nvidia-gspx-G06 550.90.07-150400.9.33.1 SUSE-SU-2024:2005-1
SLES for SAP 15 SP4 nvidia-open-driver-G06-signed 550.90.07-150400.9.62.1 SUSE-SU-2024:2005-1
SLE Micro 6.0 nvidia-open-driver-G06-signed 550.142-1.1 SUSE-SU-2025:20108-1
SLE Micro 6.0 nvidia-open-driver-G06-signed-cuda 565.57.01-1.1 SUSE-SU-2025:20108-1
SLE Micro 5.5 kernel-firmware-nvidia-gspx-G06 550.90.07-150500.11.29.1 SUSE-SU-2024:1990-1
SLE Micro 5.5 nvidia-open-driver-G06-signed 550.90.07-150500.3.47.1 SUSE-SU-2024:1990-1
SLE Micro 5.4 kernel-firmware-nvidia-gspx-G06 550.90.07-150400.9.33.1 SUSE-SU-2024:2005-1
SLE Micro 5.4 nvidia-open-driver-G06-signed 550.90.07-150400.9.62.1 SUSE-SU-2024:2005-1
SLE Micro 5.3 kernel-firmware-nvidia-gspx-G06 550.90.07-150400.9.33.1 SUSE-SU-2024:2005-1
SLE Micro 5.3 nvidia-open-driver-G06-signed 550.90.07-150400.9.62.1 SUSE-SU-2024:2005-1
SLE HPC 15 SP4 kernel-firmware-nvidia-gspx-G06 550.90.07-150400.9.33.1 SUSE-SU-2024:2005-1
SLE HPC 15 SP4 nvidia-open-driver-G06-signed 550.90.07-150400.9.62.1 SUSE-SU-2024:2005-1
SUSE Manager Server 4.3 kernel-firmware-nvidia-gspx-G06 550.90.07-150400.9.33.1 SUSE-SU-2024:2005-1
SUSE Manager Server 4.3 nvidia-open-driver-G06-signed 550.90.07-150400.9.62.1 SUSE-SU-2024:2005-1
SUSE Manager Proxy 4.3 kernel-firmware-nvidia-gspx-G06 550.90.07-150400.9.33.1 SUSE-SU-2024:2005-1
SUSE Manager Proxy 4.3 nvidia-open-driver-G06-signed 550.90.07-150400.9.62.1 SUSE-SU-2024:2005-1
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed kernel-firmware-nvidia-gspx-G06 550.90.07-1.1 openSUSE-SU-2024:14024-1
openSUSE Tumbleweed nvidia-open-driver-G06-signed 550.90.07_k6.9.3_1-1.1 openSUSE-SU-2024:14026-1
openSUSE Tumbleweed nvidia-open-driver-G07-signed 590.44.01-1.1 openSUSE-SU-2025:15804-1
openSUSE Leap 15.6 nvidia-open-driver-G06-signed +1 550.100-150600.3.7.1 SUSE-SU-2024:2585-1
openSUSE Leap 15.6 nvidia-open-driver-G06-signed-cuda +1 555.42.06-150600.3.7.1 SUSE-SU-2024:2585-1
openSUSE Leap 15.5 kernel-firmware-nvidia-gspx-G06 550.90.07-150500.11.29.1 SUSE-SU-2024:1990-1
openSUSE Leap 15.5 nvidia-open-driver-G06-signed 550.90.07-150500.3.47.1 SUSE-SU-2024:1990-1

Advisories 9

References