Today NVIDIA put out a new security bulletin, to highlight multiple security issues identified in their proprietary graphics driver for Linux and Windows.
All driver versions below 555.52.04, 550.90.07, 535.183.01 and 470.256.02 are affected. So depending on the driver series you go for, make sure you're on at least one of those or above.
From the announcement these are the ones that affect either both Linux and Windows or just Linux:
| CVE ID | Description | Severity | CWE | Impacts |
|---|---|---|---|---|
| CVE‑2024‑0090 | NVIDIA GPU driver for Windows and Linux contains a vulnerability where a user can cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering. | High | CWE‑787 | Code execution, denial of service, escalation of privileges, information disclosure, data tampering |
| CVE‑2024‑0091 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where a user can cause an untrusted pointer dereference by executing a driver API. A successful exploit of this vulnerability might lead to denial of service, information disclosure, and data tampering. | High | CWE‑822 | Denial of service, information disclosure, data tampering |
| CVE‑2024‑0093 | NVIDIA GPU software for Linux contains a vulnerability where it can expose sensitive information to an actor that is not explicitly authorized to have access to that information. A successful exploit of this vulnerability might lead to information disclosure. | Medium | CWE‑200 | Information disclosure |
| CVE‑2024‑0092 | NVIDIA GPU Driver for Windows and Linux contains a vulnerability where an improper check or improper handling of exception conditions might lead to denial of service. | Medium | CWE‑703 | Denial of service |
There's one other just for Windows, and multiple issues in VGPU Software too.
See their security bulletin dated June 6th for all the info, they only sent out the email announcement today.
Article taken from GamingOnLinux.com.
Some you may have missed, popular articles from the last month:
Patreon
PayPal
See more from me