Log in Start free

Vulnerability · Published Oct 26, 2024 · Assigned by nvidia

CVE-2024-0126

High 8.2

In plain English

A high-severity improper input validation in GPU, vGPU, and Cloud Gaming from NVIDIA. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 28% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)8.2High
Exploit odds (30 days)0.3%top 72.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability which could allow a privileged attacker to escalate permissions. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12nvidia-graphics-drivers535.216.01-1~deb12u1DEBIAN-CVE-2024-0126
Debian:13nvidia-graphics-drivers535.216.01-1DEBIAN-CVE-2024-0126
Debian:14nvidia-graphics-drivers535.216.01-1DEBIAN-CVE-2024-0126
Debian:12nvidia-graphics-drivers-tesla525.147.05-6DEBIAN-CVE-2024-0126
Debian:12nvidia-graphics-drivers-tesla-470no fix listedDEBIAN-CVE-2024-0126
Debian:12nvidia-open-gpu-kernel-modules535.216.01-1~deb12u1DEBIAN-CVE-2024-0126
Debian:13nvidia-open-gpu-kernel-modules535.216.01-1DEBIAN-CVE-2024-0126
Ubuntu:22.04:LTSnvidia-graphics-drivers-390no fix listedUBUNTU-CVE-2024-0126
Ubuntu:22.04:LTSnvidia-graphics-drivers-418-serverno fix listedUBUNTU-CVE-2024-0126
Ubuntu:22.04:LTSnvidia-graphics-drivers-430no fix listedUBUNTU-CVE-2024-0126
Ubuntu:22.04:LTSnvidia-graphics-drivers-440no fix listedUBUNTU-CVE-2024-0126
Ubuntu:22.04:LTSnvidia-graphics-drivers-450no fix listedUBUNTU-CVE-2024-0126
Ubuntu:22.04:LTSnvidia-graphics-drivers-450-serverno fix listedUBUNTU-CVE-2024-0126
Ubuntu:22.04:LTSnvidia-graphics-drivers-455no fix listedUBUNTU-CVE-2024-0126
Ubuntu:22.04:LTSnvidia-graphics-drivers-460no fix listedUBUNTU-CVE-2024-0126
Ubuntu:22.04:LTSnvidia-graphics-drivers-470no fix listedUBUNTU-CVE-2024-0126
Ubuntu:24.04:LTSnvidia-graphics-drivers-470no fix listedUBUNTU-CVE-2024-0126
Ubuntu:22.04:LTSnvidia-graphics-drivers-470-serverno fix listedUBUNTU-CVE-2024-0126
Ubuntu:24.04:LTSnvidia-graphics-drivers-470-serverno fix listedUBUNTU-CVE-2024-0126
Ubuntu:22.04:LTSnvidia-graphics-drivers-510no fix listedUBUNTU-CVE-2024-0126
Ubuntu:22.04:LTSnvidia-graphics-drivers-515no fix listedUBUNTU-CVE-2024-0126
Ubuntu:22.04:LTSnvidia-graphics-drivers-515-serverno fix listedUBUNTU-CVE-2024-0126
Ubuntu:22.04:LTSnvidia-graphics-drivers-520no fix listedUBUNTU-CVE-2024-0126
Ubuntu:22.04:LTSnvidia-graphics-drivers-530no fix listedUBUNTU-CVE-2024-0126
Ubuntu:22.04:LTSnvidia-graphics-drivers-535535.230.02-0ubuntu0.22.04.1UBUNTU-CVE-2024-0126
Ubuntu:24.04:LTSnvidia-graphics-drivers-535535.230.02-0ubuntu0.24.04.1UBUNTU-CVE-2024-0126
Ubuntu:22.04:LTSnvidia-graphics-drivers-535-server535.216.01-0ubuntu0.22.04.1UBUNTU-CVE-2024-0126
Ubuntu:24.04:LTSnvidia-graphics-drivers-535-server535.216.01-0ubuntu0.24.04.1UBUNTU-CVE-2024-0126

Affected products (as reported)

VendorProductVersions
NVIDIA GPU, vGPU, and Cloud Gaming All versions prior to 17.4, 16.8, and the October 2024 release

Weakness: CWE-20 · Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

References