The NVIDIA Linux Discrete GPU drivers before R304.125, R331.x before R331.113, R340.x before R340.65, R343.x before R343.36, and R346.x before R346.22, Linux for Tegra (L4T) driver before R21.2, and Chrome OS driver before R40 allows remote attackers to cause a denial of service (segmentation fault and X server crash) or possibly execute arbitrary code via a crafted GLX indirect rendering protocol request.
CVSS Details
- CVSS 3.1 Base Score: 7.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade nvidia-graphics-drivers | Jul 30, 2024 | Dec 10, 2014 |
| Freebsd | — | Upgrade nvidia-driver-96Upgrade nvidia-driverUpgrade nvidia-driver-304Upgrade nvidia-driver-173Upgrade nvidia-driver-71 | Dec 10, 2025 | Dec 14, 2014 |
| Oracle Solaris | — | Upgrade driver/graphics/nvidiaR340 to version 0.340.65.0-0.175.2.8.0.4.0 on Solaris 11.2Upgrade driver/graphics/nvidiaR304 to version 0.304.125.0-0.175.2.8.0.4.0 on Solaris 11.2Upgrade driver/graphics/nvidia to version 0.346.35.0-0.175.2.8.0.4.0 on Solaris 11.2Upgrade image/nvidia/cg-toolkit to version 3.0.15-0.175.2.8.0.4.0 on Solaris 11.2 | May 29, 2017 | Dec 10, 2014 |
| Ubuntu | — | Upgrade nvidia-331-updatesUpgrade nvidia-331Upgrade nvidia-304Upgrade nvidia-304-updates | Nov 8, 2024 | Dec 10, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub