Debian Nvidia-Graphics-Drivers vulnerabilities

CVE-2017-5753 [MEDIUM] CVE-2017-5753: linux - Systems with microprocessors utilizing speculative execution and branch predicti... Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis. Scope: local bookworm: resolved (fixed in 4.15.11-1) bullseye: resolved (fixed in 4.15.11-1) forky: resolved (fixed in 4.15.11-1) sid: resolved (fixed in 4.15.11-1) trixie

CVE-2017-5715 [MEDIUM] CVE-2017-5715: amd64-microcode - Systems with microprocessors utilizing speculative execution and indirect branch... Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis. Scope: local bookworm: resolved (fixed in 3.20180515.1) bullseye: resolved (fixed in 3.20180515.1) forky: resolved (fixed in 3.20180515.1) sid: resolved

CVE-2006-5379 [HIGH] CVE-2006-5379: nvidia-graphics-drivers - The accelerated rendering functionality of NVIDIA Binary Graphics Driver (binary... The accelerated rendering functionality of NVIDIA Binary Graphics Driver (binary blob driver) For Linux v8774 and v8762, and probably on other operating systems, allows local and remote attackers to execute arbitrary code via a large width value in a font glyph, which can be used to overwrite arbitrary memory locations. Scope: local bookworm: resolved

CVE-2017-5754 [MEDIUM] CVE-2017-5754: linux - Systems with microprocessors utilizing speculative execution and indirect branch... Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis of the data cache. Scope: local bookworm: resolved (fixed in 4.14.12-1) bullseye: resolved (fixed in 4.14.12-1) forky: resolved (fixed in 4.14.12-1) sid: resolved

CVE-2022-28181 [HIGH] CVE-2022-28181: nvidia-graphics-drivers - NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the ... NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where an unprivileged regular user on the network can cause an out-of-bounds write through a specially crafted shader, which may lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering. The scope o

CVE-2012-0946 [MEDIUM] CVE-2012-0946: nvidia-graphics-drivers - The NVIDIA UNIX driver before 295.40 allows local users to access arbitrary memo... The NVIDIA UNIX driver before 295.40 allows local users to access arbitrary memory locations by leveraging GPU device-node read/write privileges. Scope: local bookworm: resolved (fixed in 295.40-1) bullseye: resolved (fixed in 295.40-1) forky: resolved (fixed in 295.40-1) sid: resolved (fixed in 295.40-1) trixie: resolved (fixed in 295.40-1)

CVE-2014-8298 [HIGH] CVE-2014-8298: nvidia-graphics-drivers - The NVIDIA Linux Discrete GPU drivers before R304.125, R331.x before R331.113, R... The NVIDIA Linux Discrete GPU drivers before R304.125, R331.x before R331.113, R340.x before R340.65, R343.x before R343.36, and R346.x before R346.22, Linux for Tegra (L4T) driver before R21.2, and Chrome OS driver before R40 allows remote attackers to cause a denial of service (segmentation fault and X server crash) or possibly execute arbitrary code

CVE-2025-33219 [HIGH] CVE-2025-33219: nvidia-graphics-drivers - NVIDIA Display Driver for Linux contains a vulnerability in the NVIDIA kernel mo... NVIDIA Display Driver for Linux contains a vulnerability in the NVIDIA kernel module where an attacker could cause an integer overflow or wraparound. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, or information disclosure. Scope: local bookworm: open bullseye: ope

CVE-2024-0090 [HIGH] CVE-2024-0090: nvidia-graphics-drivers - NVIDIA GPU driver for Windows and Linux contains a vulnerability where a user ca... NVIDIA GPU driver for Windows and Linux contains a vulnerability where a user can cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering. Scope: local bookworm: resolved (fixed in 535.183.01-1~deb12u1) bullseye: resolv

CVE-2025-23244 [HIGH] CVE-2025-23244: nvidia-graphics-drivers - NVIDIA GPU Display Driver for Linux contains a vulnerability which could allow a... NVIDIA GPU Display Driver for Linux contains a vulnerability which could allow an unprivileged attacker to escalate permissions. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering. Scope: local bookworm: resolved (fixed in 535.247.01-1~deb12u

CVE-2017-0311 [HIGH] CVE-2017-0311: nvidia-graphics-drivers - NVIDIA GPU Display Driver R378 contains a vulnerability in the kernel mode layer... NVIDIA GPU Display Driver R378 contains a vulnerability in the kernel mode layer handler where improper access control may lead to denial of service or possible escalation of privileges. Scope: local bookworm: resolved (fixed in 375.39-1) bullseye: resolved (fixed in 375.39-1) forky: resolved (fixed in 375.39-1) sid: resolved (fixed in 375.39-1) trixie

CVE-2015-5053 [CRITICAL] CVE-2015-5053: nvidia-graphics-drivers - The host memory mapping path feature in the NVIDIA GPU graphics driver R346 befo... The host memory mapping path feature in the NVIDIA GPU graphics driver R346 before 346.87 and R352 before 352.41 for Linux and R352 before 352.46 for GRID vGPU and vSGA does not properly restrict access to third-party device IO memory, which allows attackers to gain privileges, cause a denial of service (resource consumption), or possibly have unsp

CVE-2016-7382 [HIGH] CVE-2016-7382: nvidia-graphics-drivers - For the NVIDIA Quadro, NVS, GeForce, and Tesla products, NVIDIA GPU Display Driv... For the NVIDIA Quadro, NVS, GeForce, and Tesla products, NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys for Windows or nvidia.ko for Linux) handler where a missing permissions check may allow users to gain access to arbitrary physical memory, leading to an escalation of privileges. Scope: local bookworm: resol

CVE-2022-42260 [HIGH] CVE-2022-42260: nvidia-graphics-drivers - NVIDIA vGPU Display Driver for Linux guest contains a vulnerability in a D-Bus c... NVIDIA vGPU Display Driver for Linux guest contains a vulnerability in a D-Bus configuration file, where an unauthorized user in the guest VM can impact protected D-Bus endpoints, which may lead to code execution, denial of service, escalation of privileges, information disclosure, or data tampering. Scope: local bookworm: resolved (fixed in 510.108.

CVE-2022-31608 [HIGH] CVE-2022-31608: nvidia-graphics-drivers - NVIDIA GPU Display Driver for Linux contains a vulnerability in an optional D-Bu... NVIDIA GPU Display Driver for Linux contains a vulnerability in an optional D-Bus configuration file, where a local user with basic capabilities can impact protected D-Bus endpoints, which may lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering. Scope: local bookworm: resolved (fixed in 470.

CVE-2023-0189 [HIGH] CVE-2023-0189: nvidia-graphics-drivers - NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode ... NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler which may lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering. Scope: local bookworm: resolved (fixed in 525.105.17-1) bullseye: resolved (fixed in 470.182.03-1) forky: resolved (fixed in 525.105.17-1

CVE-2016-7389 [HIGH] CVE-2016-7389: nvidia-graphics-drivers - For the NVIDIA Quadro, NVS, GeForce, and Tesla products, NVIDIA GPU Display Driv... For the NVIDIA Quadro, NVS, GeForce, and Tesla products, NVIDIA GPU Display Driver on Linux R304 before 304.132, R340 before 340.98, R367 before 367.55, R361_93 before 361.93.03, and R370 before 370.28 contains a vulnerability in the kernel mode layer (nvidia.ko) handler for mmap() where improper input validation may allow users to gain access to arbit

CVE-2013-0131 [HIGH] CVE-2013-0131: nvidia-graphics-drivers - Buffer overflow in the NVIDIA GPU driver before 304.88, 310.x before 310.44, and... Buffer overflow in the NVIDIA GPU driver before 304.88, 310.x before 310.44, and 313.x before 313.30 for the X Window System on UNIX, when NoScanout mode is enabled, allows remote authenticated users to execute arbitrary code via a large ARGB cursor. Scope: local bookworm: resolved (fixed in 304.88-1) bullseye: resolved (fixed in 304.88-1) forky: resol

CVE-2017-0309 [HIGH] CVE-2017-0309: nvidia-graphics-drivers - All versions of NVIDIA GPU Display Driver contain a vulnerability in the kernel ... All versions of NVIDIA GPU Display Driver contain a vulnerability in the kernel mode layer handler where multiple integer overflows may cause improper memory allocation leading to a denial of service or potential escalation of privileges. Scope: local bookworm: resolved (fixed in 375.39-1) bullseye: resolved (fixed in 375.39-1) forky: resolved (fixed i

CVE-2023-0184 [HIGH] CVE-2023-0184: nvidia-graphics-drivers - NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the ... NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer handler which may lead to denial of service, escalation of privileges, information disclosure, and data tampering. Scope: local bookworm: resolved (fixed in 525.105.17-1) bullseye: resolved (fixed in 470.182.03-1) forky: resolved (fixed in 525.105.17-1) si