CVE-2021-1077 — Improper Resource Shutdown or Release in Nvidia GPU Display Driver

CWE-404 — Improper Resource Shutdown or Release7 documents6 sources
Severity
5.5MEDIUMNVD
CNA6.6
EPSS
0.0%
top 85.32%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Nvidia GPU Display DriverNvidia GPU Display Driver
Timeline
PublishedApr 21
Latest updateMay 24

Description

NVIDIA GPU Display Driver for Windows and Linux, R450 and R460 driver branch, contains a vulnerability where the software uses a reference count to manage a resource that is incorrectly updated, which may lead to denial of service.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages2 packages

▶NVDnvidia/gpu_display_driver450 — 450.119.03+3
▶CVEListV5nvidia/nvidia_gpu_display_driverR450 and R460 driver branch

🔴Vulnerability Details

4
GHSA
GHSA-w9fh-pf7x-f7hw: NVIDIA GPU Display Driver for Windows and Linux, R450 and R460 driver branch, contains a vulnerability where the software uses a reference count to ma↗2022-05-24
▶
OSV
nvidia-graphics-drivers-390, nvidia-graphics-drivers-418-server, nvidia-graphics-drivers-450, nvidia-graphics-drivers-450-server, nvidia-graphics-drivers-460, nvidia-graphics-drivers-460-server vulner↗2021-05-04
▶
CVEList
CVE-2021-1077: NVIDIA GPU Display Driver for Windows and Linux, R450 and R460 driver branch, contains a vulnerability where the software uses a reference count to ma↗2021-04-21
▶
OSV
CVE-2021-1077: NVIDIA GPU Display Driver for Windows and Linux, R450 and R460 driver branch, contains a vulnerability where the software uses a reference count to ma↗2021-04-21
▶

📋Vendor Advisories

2
Ubuntu
NVIDIA graphics drivers vulnerabilities↗2021-05-04
▶
Debian
CVE-2021-1077: nvidia-graphics-drivers - NVIDIA GPU Display Driver for Windows and Linux, R450 and R460 driver branch, co...↗2021
▶
CVE-2021-1077 — Improper Resource Shutdown or Release | cvebase