PT-2024-4360 · Nvidia+1 · Nvidia Gpu Display Driver+2

Published

2024-06-06

·

Updated

2024-08-15

·

CVE-2024-0084

CVSS v3.1

7.8

High

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions NVIDIA vGPU software for Linux (affected versions not specified) NVIDIA GPU Display Driver for Linux (affected versions not specified)
Description The issue is related to errors in access control, allowing an attacker to execute arbitrary code, elevate privileges, or disclose protected information. A successful exploit might lead to information disclosure, data tampering, escalation of privileges, and denial of service. The vulnerability is in the Virtual GPU Manager, where the guest OS could execute privileged operations.
Recommendations For NVIDIA vGPU software for Linux, consider disabling the Virtual GPU Manager until a patch is available to prevent the guest OS from executing privileged operations. For NVIDIA GPU Display Driver for Linux, restrict access to the driver to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Weakness Enumeration

CWE-250

Related Identifiers

BDU:2024-04850
CVE-2024-0084

Affected Products

Nvidia Gpu Display Driver
Nvidia Vgpu
Red Os