CVE Vulnerabilities

CVE-2021-1103

NULL Pointer Dereference

Published: Jul 21, 2021 | Modified: Nov 21, 2024
CVSS 3.x
4.4
MEDIUM
Source:
NVD
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
CVSS 2.x
2.1 LOW
AV:L/AC:L/Au:N/C:N/I:N/A:P
RedHat/V2
RedHat/V3
Ubuntu

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where it can dereference a NULL pointer, which may lead to denial of service. This affects vGPU version 12.x (prior to 12.3), version 11.x (prior to 11.5) and version 8.x (prior 8.8).

Weakness

The product dereferences a pointer that it expects to be valid but is NULL.

Affected Software

Name Vendor Start Version End Version
Virtual_gpu Nvidia 8.0 (including) 8.8 (excluding)
Virtual_gpu Nvidia 11.0 (including) 11.5 (excluding)
Virtual_gpu Nvidia 12.0 (including) 12.3 (excluding)

Potential Mitigations

References