For the NVIDIA Quadro, NVS, GeForce, and Tesla products, NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys for Windows or nvidia.ko for Linux) handler where a missing permissions check may allow users to gain access to arbitrary physical memory, leading to an escalation of privileges.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade nvidia-graphics-drivers | Jul 30, 2024 | Nov 8, 2016 |
| Oracle Solaris | — | Upgrade driver/graphics/nvidia to version 0.375.39.0-0.175.3.20.0.2.0 on Solaris 11.3Upgrade driver/graphics/nvidiaR340 to version 0.340.102.0-0.175.3.20.0.2.0 on Solaris 11.3Upgrade driver/graphics/nvidiaR304 to version 0.304.135.0-0.175.3.20.0.2.0 on Solaris 11.3Upgrade image/nvidia/cg-toolkit to version 3.0.15-0.175.3.20.0.2.0 on Solaris 11.3 | May 29, 2017 | Nov 8, 2016 |
| Ubuntu | — | Upgrade nvidia-361Upgrade nvidia-currentUpgrade nvidia-331-updatesUpgrade nvidia-304-updatesUpgrade nvidia-331Upgrade nvidia-340Upgrade nvidia-304Upgrade nvidia-340-updatesUpgrade nvidia-352Upgrade nvidia-367Upgrade nvidia-352-updates | Nov 3, 2016 | Nov 3, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub