Escalation of Privileges Vulnerability in NVIDIA Graphics Drivers

CVE-2016-7382

What is CVE-2016-7382?

The NVIDIA GPU Display Driver for various graphics products, including the Quadro, NVS, GeForce, and Tesla series, contains a significant vulnerability in its kernel mode layer (specifically in nvlddmkm.sys for Windows and nvidia.ko for Linux). This vulnerability stems from a missing permissions check, which could potentially allow a local user to gain access to arbitrary physical memory. As a consequence, this exploitation could lead to unauthorized privilege escalation, allowing malicious users to perform actions that should otherwise be restricted.

References