NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in a kernel mode layer handler, where memory permissions are not correctly checked, which may lead to denial of service and data tampering.
Weakness
The product does not handle or incorrectly handles when it has insufficient privileges to access resources or functionality as specified by their permissions. This may cause it to follow unexpected code paths that may leave the product in an invalid state.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Virtual_gpu | Nvidia | * | 11.12 (excluding) |
| Virtual_gpu | Nvidia | 13.0 (including) | 13.7 (excluding) |
| Virtual_gpu | Nvidia | 15.0 (including) | 15.2 (excluding) |
| Nvidia-graphics-drivers-304 | Ubuntu | esm-infra/xenial | * |
| Nvidia-graphics-drivers-304 | Ubuntu | trusty | * |
| Nvidia-graphics-drivers-304 | Ubuntu | xenial | * |
| Nvidia-graphics-drivers-304-updates | Ubuntu | trusty | * |
| Nvidia-graphics-drivers-304-updates | Ubuntu | xenial | * |
| Nvidia-graphics-drivers-340 | Ubuntu | bionic | * |
| Nvidia-graphics-drivers-340 | Ubuntu | esm-infra/bionic | * |
| Nvidia-graphics-drivers-340 | Ubuntu | esm-infra/focal | * |
| Nvidia-graphics-drivers-340 | Ubuntu | esm-infra/xenial | * |
| Nvidia-graphics-drivers-340 | Ubuntu | focal | * |
| Nvidia-graphics-drivers-340 | Ubuntu | trusty | * |
| Nvidia-graphics-drivers-340 | Ubuntu | xenial | * |
| Nvidia-graphics-drivers-340-updates | Ubuntu | trusty | * |
| Nvidia-graphics-drivers-352 | Ubuntu | trusty | * |
| Nvidia-graphics-drivers-352-updates | Ubuntu | trusty | * |
| Nvidia-graphics-drivers-367 | Ubuntu | trusty | * |
| Nvidia-graphics-drivers-375 | Ubuntu | trusty | * |
| Nvidia-graphics-drivers-384 | Ubuntu | esm-apps/xenial | * |
| Nvidia-graphics-drivers-384 | Ubuntu | trusty | * |
| Nvidia-graphics-drivers-384 | Ubuntu | xenial | * |
| Nvidia-graphics-drivers-390 | Ubuntu | bionic | * |
| Nvidia-graphics-drivers-390 | Ubuntu | devel | * |
| Nvidia-graphics-drivers-390 | Ubuntu | esm-infra/bionic | * |
| Nvidia-graphics-drivers-390 | Ubuntu | esm-infra/focal | * |
| Nvidia-graphics-drivers-390 | Ubuntu | focal | * |
| Nvidia-graphics-drivers-390 | Ubuntu | jammy | * |
| Nvidia-graphics-drivers-390 | Ubuntu | kinetic | * |
| Nvidia-graphics-drivers-390 | Ubuntu | lunar | * |
| Nvidia-graphics-drivers-418-server | Ubuntu | bionic | * |
| Nvidia-graphics-drivers-418-server | Ubuntu | devel | * |
| Nvidia-graphics-drivers-418-server | Ubuntu | esm-apps/bionic | * |
| Nvidia-graphics-drivers-418-server | Ubuntu | esm-apps/focal | * |
| Nvidia-graphics-drivers-418-server | Ubuntu | focal | * |
| Nvidia-graphics-drivers-418-server | Ubuntu | jammy | * |
| Nvidia-graphics-drivers-430 | Ubuntu | bionic | * |
| Nvidia-graphics-drivers-430 | Ubuntu | devel | * |
| Nvidia-graphics-drivers-430 | Ubuntu | esm-infra/bionic | * |
| Nvidia-graphics-drivers-430 | Ubuntu | esm-infra/focal | * |
| Nvidia-graphics-drivers-430 | Ubuntu | focal | * |
| Nvidia-graphics-drivers-430 | Ubuntu | jammy | * |
| Nvidia-graphics-drivers-430 | Ubuntu | kinetic | * |
| Nvidia-graphics-drivers-430 | Ubuntu | lunar | * |
| Nvidia-graphics-drivers-435 | Ubuntu | bionic | * |
| Nvidia-graphics-drivers-435 | Ubuntu | devel | * |
| Nvidia-graphics-drivers-435 | Ubuntu | esm-apps/jammy | * |
| Nvidia-graphics-drivers-435 | Ubuntu | esm-infra/bionic | * |
| Nvidia-graphics-drivers-435 | Ubuntu | esm-infra/focal | * |
| Nvidia-graphics-drivers-435 | Ubuntu | focal | * |
| Nvidia-graphics-drivers-435 | Ubuntu | jammy | * |
| Nvidia-graphics-drivers-435 | Ubuntu | kinetic | * |
| Nvidia-graphics-drivers-435 | Ubuntu | lunar | * |
| Nvidia-graphics-drivers-440 | Ubuntu | bionic | * |
| Nvidia-graphics-drivers-440 | Ubuntu | devel | * |
| Nvidia-graphics-drivers-440 | Ubuntu | esm-infra/bionic | * |
| Nvidia-graphics-drivers-440 | Ubuntu | esm-infra/focal | * |
| Nvidia-graphics-drivers-440 | Ubuntu | focal | * |
| Nvidia-graphics-drivers-440 | Ubuntu | jammy | * |
| Nvidia-graphics-drivers-440 | Ubuntu | kinetic | * |
| Nvidia-graphics-drivers-440 | Ubuntu | lunar | * |
| Nvidia-graphics-drivers-440-server | Ubuntu | bionic | * |
| Nvidia-graphics-drivers-440-server | Ubuntu | devel | * |
| Nvidia-graphics-drivers-440-server | Ubuntu | esm-apps/bionic | * |
| Nvidia-graphics-drivers-440-server | Ubuntu | esm-apps/focal | * |
| Nvidia-graphics-drivers-440-server | Ubuntu | esm-apps/jammy | * |
| Nvidia-graphics-drivers-440-server | Ubuntu | focal | * |
| Nvidia-graphics-drivers-440-server | Ubuntu | jammy | * |
| Nvidia-graphics-drivers-440-server | Ubuntu | kinetic | * |
| Nvidia-graphics-drivers-440-server | Ubuntu | lunar | * |
| Nvidia-graphics-drivers-450 | Ubuntu | bionic | * |
| Nvidia-graphics-drivers-450 | Ubuntu | devel | * |
| Nvidia-graphics-drivers-450 | Ubuntu | esm-infra/bionic | * |
| Nvidia-graphics-drivers-450 | Ubuntu | esm-infra/focal | * |
| Nvidia-graphics-drivers-450 | Ubuntu | focal | * |
| Nvidia-graphics-drivers-450 | Ubuntu | jammy | * |
| Nvidia-graphics-drivers-450 | Ubuntu | kinetic | * |
| Nvidia-graphics-drivers-450 | Ubuntu | lunar | * |
| Nvidia-graphics-drivers-450-server | Ubuntu | bionic | * |
| Nvidia-graphics-drivers-450-server | Ubuntu | devel | * |
| Nvidia-graphics-drivers-450-server | Ubuntu | esm-infra/bionic | * |
| Nvidia-graphics-drivers-450-server | Ubuntu | esm-infra/focal | * |
| Nvidia-graphics-drivers-450-server | Ubuntu | focal | * |
| Nvidia-graphics-drivers-450-server | Ubuntu | jammy | * |
| Nvidia-graphics-drivers-450-server | Ubuntu | kinetic | * |
| Nvidia-graphics-drivers-450-server | Ubuntu | lunar | * |
| Nvidia-graphics-drivers-455 | Ubuntu | bionic | * |
| Nvidia-graphics-drivers-455 | Ubuntu | devel | * |
| Nvidia-graphics-drivers-455 | Ubuntu | esm-apps/bionic | * |
| Nvidia-graphics-drivers-455 | Ubuntu | esm-apps/focal | * |
| Nvidia-graphics-drivers-455 | Ubuntu | focal | * |
| Nvidia-graphics-drivers-455 | Ubuntu | jammy | * |
| Nvidia-graphics-drivers-455 | Ubuntu | kinetic | * |
| Nvidia-graphics-drivers-455 | Ubuntu | lunar | * |
| Nvidia-graphics-drivers-460 | Ubuntu | bionic | * |
| Nvidia-graphics-drivers-460 | Ubuntu | devel | * |
| Nvidia-graphics-drivers-460 | Ubuntu | esm-infra/bionic | * |
| Nvidia-graphics-drivers-460 | Ubuntu | esm-infra/focal | * |
| Nvidia-graphics-drivers-460 | Ubuntu | focal | * |
| Nvidia-graphics-drivers-460 | Ubuntu | jammy | * |
| Nvidia-graphics-drivers-460 | Ubuntu | kinetic | * |
| Nvidia-graphics-drivers-460 | Ubuntu | lunar | * |
| Nvidia-graphics-drivers-460-server | Ubuntu | bionic | * |
| Nvidia-graphics-drivers-460-server | Ubuntu | esm-infra/bionic | * |
| Nvidia-graphics-drivers-460-server | Ubuntu | esm-infra/focal | * |
| Nvidia-graphics-drivers-460-server | Ubuntu | focal | * |
| Nvidia-graphics-drivers-470 | Ubuntu | bionic | * |
| Nvidia-graphics-drivers-470 | Ubuntu | devel | * |
| Nvidia-graphics-drivers-470 | Ubuntu | esm-infra/bionic | * |
| Nvidia-graphics-drivers-470 | Ubuntu | esm-infra/focal | * |
| Nvidia-graphics-drivers-470 | Ubuntu | focal | * |
| Nvidia-graphics-drivers-470 | Ubuntu | jammy | * |
| Nvidia-graphics-drivers-470 | Ubuntu | kinetic | * |
| Nvidia-graphics-drivers-470 | Ubuntu | lunar | * |
| Nvidia-graphics-drivers-470-server | Ubuntu | bionic | * |
| Nvidia-graphics-drivers-470-server | Ubuntu | devel | * |
| Nvidia-graphics-drivers-470-server | Ubuntu | esm-infra/bionic | * |
| Nvidia-graphics-drivers-470-server | Ubuntu | esm-infra/focal | * |
| Nvidia-graphics-drivers-470-server | Ubuntu | focal | * |
| Nvidia-graphics-drivers-470-server | Ubuntu | jammy | * |
| Nvidia-graphics-drivers-470-server | Ubuntu | kinetic | * |
| Nvidia-graphics-drivers-470-server | Ubuntu | lunar | * |
| Nvidia-graphics-drivers-510 | Ubuntu | bionic | * |
| Nvidia-graphics-drivers-510 | Ubuntu | devel | * |
| Nvidia-graphics-drivers-510 | Ubuntu | esm-infra/bionic | * |
| Nvidia-graphics-drivers-510 | Ubuntu | esm-infra/focal | * |
| Nvidia-graphics-drivers-510 | Ubuntu | focal | * |
| Nvidia-graphics-drivers-510 | Ubuntu | jammy | * |
| Nvidia-graphics-drivers-510 | Ubuntu | kinetic | * |
| Nvidia-graphics-drivers-510 | Ubuntu | lunar | * |
| Nvidia-graphics-drivers-515 | Ubuntu | bionic | * |
| Nvidia-graphics-drivers-515 | Ubuntu | devel | * |
| Nvidia-graphics-drivers-515 | Ubuntu | esm-infra/bionic | * |
| Nvidia-graphics-drivers-515 | Ubuntu | esm-infra/focal | * |
| Nvidia-graphics-drivers-515 | Ubuntu | focal | * |
| Nvidia-graphics-drivers-515 | Ubuntu | jammy | * |
| Nvidia-graphics-drivers-515 | Ubuntu | kinetic | * |
| Nvidia-graphics-drivers-515 | Ubuntu | lunar | * |
| Nvidia-graphics-drivers-515-server | Ubuntu | bionic | * |
| Nvidia-graphics-drivers-515-server | Ubuntu | devel | * |
| Nvidia-graphics-drivers-515-server | Ubuntu | esm-infra/bionic | * |
| Nvidia-graphics-drivers-515-server | Ubuntu | esm-infra/focal | * |
| Nvidia-graphics-drivers-515-server | Ubuntu | focal | * |
| Nvidia-graphics-drivers-515-server | Ubuntu | jammy | * |
| Nvidia-graphics-drivers-515-server | Ubuntu | kinetic | * |
| Nvidia-graphics-drivers-515-server | Ubuntu | lunar | * |
| Nvidia-graphics-drivers-520 | Ubuntu | bionic | * |
| Nvidia-graphics-drivers-520 | Ubuntu | esm-infra/bionic | * |
| Nvidia-graphics-drivers-520 | Ubuntu | esm-infra/focal | * |
| Nvidia-graphics-drivers-520 | Ubuntu | focal | * |
| Nvidia-graphics-drivers-520 | Ubuntu | jammy | * |
| Nvidia-graphics-drivers-520 | Ubuntu | kinetic | * |
| Nvidia-graphics-drivers-525 | Ubuntu | bionic | * |
| Nvidia-graphics-drivers-525 | Ubuntu | devel | * |
| Nvidia-graphics-drivers-525 | Ubuntu | esm-infra/bionic | * |
| Nvidia-graphics-drivers-525 | Ubuntu | esm-infra/focal | * |
| Nvidia-graphics-drivers-525 | Ubuntu | focal | * |
| Nvidia-graphics-drivers-525 | Ubuntu | jammy | * |
| Nvidia-graphics-drivers-525 | Ubuntu | kinetic | * |
| Nvidia-graphics-drivers-525 | Ubuntu | lunar | * |
| Nvidia-graphics-drivers-525-server | Ubuntu | bionic | * |
| Nvidia-graphics-drivers-525-server | Ubuntu | devel | * |
| Nvidia-graphics-drivers-525-server | Ubuntu | esm-infra/bionic | * |
| Nvidia-graphics-drivers-525-server | Ubuntu | esm-infra/focal | * |
| Nvidia-graphics-drivers-525-server | Ubuntu | focal | * |
| Nvidia-graphics-drivers-525-server | Ubuntu | jammy | * |
| Nvidia-graphics-drivers-525-server | Ubuntu | kinetic | * |
| Nvidia-graphics-drivers-525-server | Ubuntu | lunar | * |
Potential Mitigations
- Compartmentalize the system to have “safe” areas where trust boundaries can be unambiguously drawn. Do not allow sensitive data to go outside of the trust boundary and always be careful when interfacing with a compartment outside of the safe area.
- Ensure that appropriate compartmentalization is built into the system design, and the compartmentalization allows for and reinforces privilege separation functionality. Architects and designers should rely on the principle of least privilege to decide the appropriate time to use privileges and the time to drop privileges.