Lucene search

NvidiaCVE-2023-0190

HistoryApr 22, 2023 - 3:15 a.m.

CVE-2023-0190

2023-04-2203:15:08

CWE-476

nvidia

web.nvd.nist.gov

nvidia

gpu

display driver

linux

vulnerability

kernel mode

null pointer

denial of service

cve-2023-0190

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

5.3

Confidence

High

EPSS

Percentile

9.0%

JSON

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where a NULL pointer dereference may lead to denial of service.

Affected configurations

Nvd

Node

nvidiagpu_display_driverRange470–470.182.03linux

nvidiagpu_display_driverRange515–515.105.01linux

nvidiagpu_display_driverRange525–525.105.17linux

nvidiagpu_display_driverRange530–530.41.03linux

AND

nvidiageforceMatch-

nvidianvsMatch-

nvidiaquadroMatch-

nvidiartxMatch-

Node

nvidiagpu_display_driverRange450–450.236.01linux

AND

nvidiateslaMatch-

VendorProductVersionCPE
nvidiagpu_display_driver*cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:linux:*:*
nvidiageforce-cpe:2.3:a:nvidia:geforce:-:*:*:*:*:*:*:*
nvidianvs-cpe:2.3:a:nvidia:nvs:-:*:*:*:*:*:*:*
nvidiaquadro-cpe:2.3:a:nvidia:quadro:-:*:*:*:*:*:*:*
nvidiartx-cpe:2.3:a:nvidia:rtx:-:*:*:*:*:*:*:*
nvidiatesla-cpe:2.3:a:nvidia:tesla:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
nvidia	gpu_display_driver	*	cpe:2.3:a:nvidia:gpu_display_driver::::::linux::*
nvidia	geforce	-	cpe:2.3:a:nvidia:geforce:-:::::::*
nvidia	nvs	-	cpe:2.3:a:nvidia:nvs:-:::::::*
nvidia	quadro	-	cpe:2.3:a:nvidia:quadro:-:::::::*
nvidia	rtx	-	cpe:2.3:a:nvidia:rtx:-:::::::*
nvidia	tesla	-	cpe:2.3:a:nvidia:tesla:-:::::::*

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "NVIDIA GPU Display Driver",
    "vendor": "NVIDIA",
    "versions": [
      {
        "status": "affected",
        "version": "All versions prior to and including 15.1, 13.6, 11.11, and all versions prior to and including February 2023 release"
      }
    ]
  }
]