Skip to content
OpenAdvisories
Low · 3.3 CVE-2024-0123 EUVD-2024-15924GHSA-ff23-px5j-g8qq

NVIDIA CUDA toolkit for Windows and Linux contains a vulnerability in the nvdisasm command line tool where an attacker may cause an imprope…

Published Oct 3, 2024 · Updated Oct 3, 2024 · Assigned by nvidia

Description

NVIDIA CUDA toolkit for Windows and Linux contains a vulnerability in the nvdisasm command line tool where an attacker may cause an improper validation in input issue by tricking the user into running nvdisasm on a malicious ELF file. A successful exploit of this vulnerability may lead to denial of service.

Affected products

VendorProductAffectedFixed
NVIDIA CUDA Toolkit All versions up to and including CUDA Toolkit 12.6U1 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 13 nvidia-cuda-toolkit No fix yet —
Debian 12 nvidia-cuda-toolkit No fix yet —
ReleasePackageFixed inAdvisory
Ubuntu 26.10 nvidia-cuda-toolkit No fix yet —
Ubuntu 26.04 LTS nvidia-cuda-toolkit No fix yet —
Ubuntu 25.10 nvidia-cuda-toolkit No fix yet —
Ubuntu 24.04 LTS nvidia-cuda-toolkit No fix yet —
Ubuntu 22.04 LTS nvidia-cuda-toolkit No fix yet —
Show 3 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu 20.04 LTS nvidia-cuda-toolkit No fix yet —
Ubuntu 18.04 LTS nvidia-cuda-toolkit No fix yet —
Ubuntu 16.04 LTS nvidia-cuda-toolkit No fix yet —

References