Amazon Linux 2023 : kmod-nvidia-latest-dkms (ALAS2023NVIDIA-2026-294)

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
#
# The descriptive text and package checks in this plugin were
# extracted from Amazon Linux 2023 Security Advisory ALAS2023NVIDIA-2026-294.
##

include('compat.inc');

if (description)
{
  script_id(319852);
  script_version("1.2");
  script_set_attribute(attribute:"plugin_modification_date", value:"2026/06/11");

  script_cve_id(
    "CVE-2025-33221",
    "CVE-2026-24182",
    "CVE-2026-24187",
    "CVE-2026-24190",
    "CVE-2026-24192",
    "CVE-2026-24194",
    "CVE-2026-24195",
    "CVE-2026-24196",
    "CVE-2026-24197",
    "CVE-2026-24198",
    "CVE-2026-24199"
  );
  script_xref(name:"IAVA", value:"2026-A-0493");

  script_name(english:"Amazon Linux 2023 : kmod-nvidia-latest-dkms (ALAS2023NVIDIA-2026-294)");

  script_set_attribute(attribute:"synopsis", value:
"The remote Amazon Linux 2023 host is missing a security update.");
  script_set_attribute(attribute:"description", value:
"It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023NVIDIA-2026-294 advisory.

    NVIDIA Display Driver for Windows and Linux contains a vulnerability in the kernel driver, where a user
    could cause an incorrect permission assignment for a critical resource. A successful exploit of this
    vulnerability might lead to data tampering and denial of service. (CVE-2025-33221)

    NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker could leak held
    driver locks. A successful exploit of this vulnerability might lead to denial of service. (CVE-2026-24182)

    NVIDIA Display Driver for Linux contains a vulnerability where an attacker could cause a use-after-free. A
    successful exploit of this vulnerability might lead to denial of service, escalation of privileges,
    information disclosure, data tampering, and code execution. (CVE-2026-24187)

    NVIDIA Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a
    user could cause improper access to GPU resources. A successful exploit of this vulnerability might lead
    to denial of service, escalation of privileges, information disclosure, data tampering, and code
    execution. (CVE-2026-24190)

    NVIDIA Display Driver for Linux contains a vulnerability where an attacker could cause an incorrect
    conversion between numeric types, leading to a heap buffer overflow. A successful exploit of this
    vulnerability might lead to denial of service, escalation of privileges, information disclosure, data
    tampering, and code execution. (CVE-2026-24192)

    NVIDIA Display Driver for Linux contains a vulnerability in a kernel mode layer handler, where a user
    could cause improper permission handling. A successful exploit of this vulnerability might lead to denial
    of service, escalation of privileges, information disclosure, data tampering, and code execution.
    (CVE-2026-24194)

    NVIDIA Display Driver for Linux contains a vulnerability in UVM, where a user could cause improper input
    validation. A successful exploit of this vulnerability might lead to denial of service. (CVE-2026-24195)

    NVIDIA Display Driver for Linux contains a vulnerability where a user could cause an out-of-bounds read. A
    successful exploit of this vulnerability might lead to denial of service and information disclosure.
    (CVE-2026-24196)

    NVIDIA Display Driver for Linux contains a vulnerability in the Multi-Instance GPU (MIG) partition
    management, where an insecure default initialization of memory subsystem routing resources could lead to
    data corruption or a hang during partition reconfiguration. A successful exploit of this vulnerability
    might lead to denial of service. (CVE-2026-24197)

    NVIDIA GPU Display Driver for Linux  contains a vulnerability where an advanced attacker could use a race
    condition to leak sensitive memory, which might cause limited exposure of sensitive information to an
    unauthorized actor. A successful exploit of this vulnerability might lead to denial of service, data
    tampering, and information disclosure. (CVE-2026-24198)

    NVIDIA Display Driver for Linux contains a vulnerability in a kernel module, where a user could cause a
    race condition by reordering compiler or processor memory instructions. A successful exploit of this
    vulnerability might lead to denial of service. (CVE-2026-24199)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version
number.");
  script_set_attribute(attribute:"see_also", value:"https://alas.aws.amazon.com//AL2023/ALAS2023NVIDIA-2026-294.html");
  script_set_attribute(attribute:"see_also", value:"https://alas.aws.amazon.com/faqs.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2025-33221.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-24182.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-24187.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-24190.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-24192.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-24194.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-24195.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-24196.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-24197.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-24198.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-24199.html");
  script_set_attribute(attribute:"solution", value:
"Run 'dnf update kmod-nvidia-latest-dkms --releasever latest' or
  or 'dnf update --advisory ALAS2023NVIDIA-2026-294 --releasever latest' to update your system.");
  script_set_cvss_base_vector("CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C");
  script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2026-24194");
  script_set_attribute(attribute:"cvss3_score_source", value:"CVE-2025-33221");

  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"false");

  script_set_attribute(attribute:"vuln_publication_date", value:"2026/05/21");
  script_set_attribute(attribute:"patch_publication_date", value:"2026/06/08");
  script_set_attribute(attribute:"plugin_publication_date", value:"2026/06/08");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:kmod-nvidia-latest-dkms");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:amazon:linux:2023");
  script_set_attribute(attribute:"generated_plugin", value:"current");
  script_set_attribute(attribute:"stig_severity", value:"I");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Amazon Linux Local Security Checks");

  script_copyright(english:"This script is Copyright (C) 2026 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("ssh_get_info.nasl");
  script_require_keys("Host/local_checks_enabled", "Host/AmazonLinux/release", "Host/AmazonLinux/rpm-list");

  exit(0);
}

include("rpm.inc");

if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);

var alas_release = get_kb_item("Host/AmazonLinux/release");
if (isnull(alas_release) || !strlen(alas_release)) audit(AUDIT_OS_NOT, "Amazon Linux");
var os_ver = pregmatch(pattern: "^AL(A|\d+|-\d+)", string:alas_release);
if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "Amazon Linux");
os_ver = os_ver[1];
if (os_ver != "-2023")
{
  if (os_ver == 'A') os_ver = 'AMI';
  audit(AUDIT_OS_NOT, "Amazon Linux 2023", "Amazon Linux " + os_ver);
}

if (!get_kb_item("Host/AmazonLinux/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);

var pkgs = [
    {'reference':'kmod-nvidia-latest-dkms-595.71.05-1.amzn2023', 'cpu':'x86_64', 'release':'AL-2023', 'rpm_spec_vers_cmp':TRUE}
];

var flag = 0;
foreach var package_array ( pkgs ) {
  var reference = NULL;
  var _release = NULL;
  var sp = NULL;
  var _cpu = NULL;
  var el_string = NULL;
  var rpm_spec_vers_cmp = NULL;
  var epoch = NULL;
  var allowmaj = NULL;
  var exists_check = NULL;
  var cves = NULL;
  if (!empty_or_null(package_array['reference'])) reference = package_array['reference'];
  if (!empty_or_null(package_array['release'])) _release = package_array['release'];
  if (!empty_or_null(package_array['sp'])) sp = package_array['sp'];
  if (!empty_or_null(package_array['cpu'])) _cpu = package_array['cpu'];
  if (!empty_or_null(package_array['el_string'])) el_string = package_array['el_string'];
  if (!empty_or_null(package_array['rpm_spec_vers_cmp'])) rpm_spec_vers_cmp = package_array['rpm_spec_vers_cmp'];
  if (!empty_or_null(package_array['epoch'])) epoch = package_array['epoch'];
  if (!empty_or_null(package_array['allowmaj'])) allowmaj = package_array['allowmaj'];
  if (!empty_or_null(package_array['exists_check'])) exists_check = package_array['exists_check'];
  if (!empty_or_null(package_array['cves'])) cves = package_array['cves'];
  if (reference && _release && (!exists_check || rpm_exists(release:_release, rpm:exists_check))) {
    if (rpm_check(release:_release, sp:sp, cpu:_cpu, reference:reference, epoch:epoch, el_string:el_string, rpm_spec_vers_cmp:rpm_spec_vers_cmp, allowmaj:allowmaj, cves:cves)) flag++;
  }
}

if (flag)
{
  security_report_v4(
      port       : 0,
      severity   : SECURITY_WARNING,
      extra      : rpm_report_get()
  );
  exit(0);
}
else
{
  var tested = pkg_tests_get();
  if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
  else audit(AUDIT_PACKAGE_NOT_INSTALLED, "kmod-nvidia-latest-dkms");
}