PT-2020-7173 · Nvidia · Nvidia Linux Driver

Kees Cook · Published 2020-05-08 · Updated 2020-05-18 · CVE-2012-0953

Positive Technologies (AI Summary)

CVSS v3.1

5.0

Medium

Base vector

AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Nvidia Linux drivers versions prior to 295.53

Description A race condition was discovered in the Linux drivers for Nvidia graphics, allowing an attacker to exfiltrate kernel memory to userspace.

Recommendations For versions prior to 295.53, update to version 295.53 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive kernel memory areas until the update can be applied.

Exploit

Fix

Race Condition

Weakness Enumeration

CWE-362

Related Identifiers

CVE-2012-0953

Affected Products

Nvidia Linux Driver

References · 6

• 🔥 https://bugs.launchpad.net/ubuntu/+source/nvidia-graphics-drivers/+bug/979373 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2012-0953 · Security Note
• https://osv.dev/vulnerability/CVE-2012-0953 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2012-0953 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2012-0953 · Vendor Advisory
• https://t.me/cibsecurity/11937 · Telegram Post