For the NVIDIA Quadro, NVS, GeForce, and Tesla products, NVIDIA GPU Display Driver on Linux R304 before 304.132, R340 before 340.98, R367 before 367.55, R361_93 before 361.93.03, and R370 before 370.28 contains a vulnerability in the kernel mode layer (nvidia.ko) handler for mmap() where improper input validation may allow users to gain access to arbitrary physical memory, leading to an escalation of privileges.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade nvidia-graphics-drivers | Jul 30, 2024 | Nov 8, 2016 |
| Oracle Solaris | — | Upgrade image/nvidia/cg-toolkit to version 3.0.15-0.175.3.20.0.2.0 on Solaris 11.3Upgrade driver/graphics/nvidia to version 0.375.39.0-0.175.3.20.0.2.0 on Solaris 11.3Upgrade driver/graphics/nvidiaR304 to version 0.304.135.0-0.175.3.20.0.2.0 on Solaris 11.3Upgrade driver/graphics/nvidiaR340 to version 0.340.102.0-0.175.3.20.0.2.0 on Solaris 11.3 | May 29, 2017 | Nov 8, 2016 |
| Ubuntu | — | Upgrade nvidia-304Upgrade nvidia-currentUpgrade nvidia-304-updatesUpgrade nvidia-352Upgrade nvidia-340-updatesUpgrade nvidia-331Upgrade nvidia-367Upgrade nvidia-340Upgrade nvidia-331-updatesUpgrade nvidia-352-updatesUpgrade nvidia-361 | Nov 3, 2016 | Nov 3, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub