CVE Vulnerabilities

CVE-2021-1051

Improper Privilege Management

Published: Jan 08, 2021 | Modified: Jul 23, 2021
CVSS 3.x
8.4
HIGH
Source:
NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H
CVSS 2.x
6.6 MEDIUM
AV:L/AC:L/Au:N/C:N/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape in which a local user can get elevated privileges to modify display configuration data, which may result in denial of service of the display.

Weakness

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

Affected Software

Name Vendor Start Version End Version
Gpu_driver Nvidia 390 (including) 392.63 (excluding)
Gpu_driver Nvidia 418 (including) 427.11 (excluding)
Gpu_driver Nvidia 450 (including) 452.77 (excluding)
Gpu_driver Nvidia 460 (including) 461.09 (excluding)

Potential Mitigations

References