PT-2021-2437 · Nvidia+2 · Nvidia Gpu Display Driver+2

Published 2021-01-07 · Updated 2023-10-13 · CVE-2021-1052

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: NVIDIA GPU Display Driver for Windows and Linux, all versions

Description: The issue is related to incorrect access to legacy APIs in the kernel mode layer handler for DxgkDdiEscape or IOCTL, allowing user-mode clients to access privileged APIs. This may lead to denial of service, escalation of privileges, and information disclosure.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

BDU:2021-01716

CVE-2021-1052

MGASA-2021-0026

MGASA-2021-0029

USN-4689-1

USN-4689-2

USN-4689-3

USN-4689-4

Affected Products

Linuxmint

Nvidia Gpu Display Driver

Ubuntu

References · 31

• 🔥 https://github.com/pokerfaceSad/CVE-2021-1056 · Exploit
• https://osv.dev/vulnerability/USN-4689-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-1053 · Vendor Advisory
• https://osv.dev/vulnerability/USN-4689-3 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se16-bulletin-20210611SE16 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-4689-4 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-1056 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-1052 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-1052 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2021-1052 · Security Note
• https://ubuntu.com/security/notices/USN-4689-2 · Vendor Advisory
• https://osv.dev/vulnerability/USN-4689-2 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2021-0026 · Vendor Advisory
• https://security.gentoo.org/glsa/202310-02 · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-01716 · Security Note