The NVIDIA display driver R352 before 353.82 and R340 before 341.81 on Windows; R304 before 304.128, R340 before 340.93, and R352 before 352.41 on Linux; and R352 before 352.46 on GRID vGPU and vSGA allows local users to write to an arbitrary kernel memory location and consequently gain privileges via a crafted ioctl call.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade nvidia-graphics-drivers | Jul 30, 2024 | Sep 30, 2015 |
| Oracle Solaris | — | Upgrade driver/graphics/nvidiaR304 to version 0.304.135.0-0.175.3.20.0.2.0 on Solaris 11.3Upgrade driver/graphics/nvidia to version 0.375.39.0-0.175.3.20.0.2.0 on Solaris 11.3Upgrade image/nvidia/cg-toolkit to version 3.0.15-0.175.3.20.0.2.0 on Solaris 11.3Upgrade driver/graphics/nvidiaR340 to version 0.340.102.0-0.175.3.20.0.2.0 on Solaris 11.3 | May 29, 2017 | Sep 29, 2015 |
| Ubuntu | — | Upgrade nvidia-346-updatesUpgrade jockey-commonUpgrade nvidia-340-updatesUpgrade nvidia-346Upgrade nvidia-304Upgrade nvidia-304-updatesUpgrade nvidia-340 | Nov 8, 2024 | Sep 30, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub