Kernel Mode Layer Vulnerability in NVIDIA GPU Display Drivers
CVE-2016-7389

7.8HIGH

Key Information:

Vendor
Nvidia
Status
Quadro, Nvs, Geforce, And Tesla (all Versions)
Vendor
CVE Published:
8 November 2016

Summary

The NVIDIA GPU Display Driver for Quadro, NVS, GeForce, and Tesla products on Linux is impacted by a vulnerability in the kernel mode layer (nvidia.ko) handler for mmap(). The flaw arises from insufficient input validation, potentially allowing users to access arbitrary physical memory. This may result in privilege escalation, posing a significant security risk to systems utilizing these drivers.

Affected Version(s)

Quadro, NVS, GeForce, and Tesla (all ) Quadro, NVS, GeForce, and Tesla (all versions)

References

http://www.securityfocus.com/bid/94177
vdb-entryx_refsource_BID
http://nvidia.custhelp.com/app/answers/detail/a_id/4246
x_refsource_CONFIRM

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.