PT-2024-7975 · Nvidia+1 · Nvidia Vgpu+1

Published 2024-10-22 · Updated 2025-09-25 · CVE-2024-0127

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NVIDIA vGPU software (affected versions not specified)

Description The issue is related to improper input validation in the GPU kernel driver of the vGPU Manager for all supported hypervisors. A user of the guest OS can compromise the guest OS kernel, potentially leading to code execution, escalation of privileges, data tampering, denial of service, and information disclosure.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2024-09488

CVE-2024-0127

Affected Products

Nvidia Vgpu

Red Os

References · 11

• https://nvd.nist.gov/vuln/detail/CVE-2024-0127 · Security Note
• http://repo.red-soft.ru/redos/7.3c/x86_64/updates · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-09488 · Security Note
• https://redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti/mnozhestvennye-uyazvimosti-nvidia-drivers-25092025 · Note
• https://suse.com/security/cve/CVE-2024-0127.html · Note
• https://nvidia.custhelp.com/app/answers/detail/a_id/5586 · Note
• https://redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti/mnozhestvennye-uyazvimosti-nvidia-persistenced-25092025 · Note
• https://t.me/cvenotify/99596 · Telegram Post
• https://redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti/mnozhestvennye-uyazvimosti-nvidia-modprobe-25092025 · Note
• https://t.me/cvedetector/9028 · Telegram Post
• https://t.me/latest_high_impact_cve/1392 · Telegram Post