Skip to content
OpenAdvisories
High · 8.2 CVE-2024-0126 EUVD-2024-15927GHSA-9gx5-phw8-cmrj

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability which could allow a privileged attacker to escalate permissions. A…

Published Oct 26, 2024 · Updated Nov 1, 2024 · Assigned by nvidia

Vendor: NVIDIA Product: GPU, vGPU, and Cloud Gaming Package: nvidia-graphics-drivers Package: nvidia-graphics-drivers-304 Package: nvidia-graphics-drivers-340 Package: nvidia-graphics-drivers-390 Package: nvidia-graphics-drivers-418-server Package: nvidia-graphics-drivers-430 Package: nvidia-graphics-drivers-435 Package: nvidia-graphics-drivers-440 Package: nvidia-graphics-drivers-440-server Package: nvidia-graphics-drivers-450 Package: nvidia-graphics-drivers-450-server Package: nvidia-graphics-drivers-455 Package: nvidia-graphics-drivers-460 Package: nvidia-graphics-drivers-460-server Package: nvidia-graphics-drivers-470 Package: nvidia-graphics-drivers-470-server Package: nvidia-graphics-drivers-510 Package: nvidia-graphics-drivers-515 Package: nvidia-graphics-drivers-515-server Package: nvidia-graphics-drivers-520 Package: nvidia-graphics-drivers-530 Package: nvidia-graphics-drivers-535 Package: nvidia-graphics-drivers-535-server Package: nvidia-graphics-drivers-tesla Package: nvidia-graphics-drivers-tesla-470 Package: nvidia-open-gpu-kernel-modules Ecosystem: Debian Ecosystem: Ubuntu

Description

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability which could allow a privileged attacker to escalate permissions. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

Affected products

VendorProductAffectedFixed
NVIDIA GPU, vGPU, and Cloud Gaming All versions prior to 17.4, 16.8, and the October 2024 release —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 nvidia-graphics-drivers 535.216.01-1 —
Debian 13 nvidia-graphics-drivers +1 535.216.01-1 —
Debian 12 nvidia-graphics-drivers +1 535.216.01-1~deb12u1 —
Debian 12 nvidia-graphics-drivers-tesla 525.147.05-6 —
Debian 12 nvidia-graphics-drivers-tesla-470 No fix yet —

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 24.04 LTS nvidia-graphics-drivers-470 +1 No fix yet —
Ubuntu 24.04 LTS nvidia-graphics-drivers-535 535.230.02-0ubuntu0.24.04.1 —
Ubuntu 24.04 LTS nvidia-graphics-drivers-535-server 535.216.01-0ubuntu0.24.04.1 —
Ubuntu 22.04 LTS nvidia-graphics-drivers-390 +14 No fix yet —
Ubuntu 22.04 LTS nvidia-graphics-drivers-535 535.230.02-0ubuntu0.22.04.1 —
Ubuntu 22.04 LTS nvidia-graphics-drivers-535-server 535.216.01-0ubuntu0.22.04.1 —
Ubuntu 20.04 LTS nvidia-graphics-drivers-340 +17 No fix yet —
Ubuntu 20.04 LTS nvidia-graphics-drivers-535 535.230.02-0ubuntu0.20.04.1 —
Ubuntu 20.04 LTS nvidia-graphics-drivers-535-server 535.216.01-0ubuntu0.20.04.1 —
Ubuntu 18.04 LTS nvidia-graphics-drivers-340 +15 No fix yet —
Ubuntu 16.04 LTS nvidia-graphics-drivers-304 +1 No fix yet —
Show 2 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu Pro 20.04 LTS nvidia-graphics-drivers-450-server No fix yet —
Ubuntu Pro 18.04 LTS nvidia-graphics-drivers-470 +2 No fix yet —

Advisories 1

References