Lucene search

K
nvd[email protected]NVD:CVE-2023-0189
HistoryApr 01, 2023 - 5:15 a.m.

CVE-2023-0189

2023-04-0105:15:08
CWE-822
web.nvd.nist.gov
6
nvidia
linux
kernel
code execution
denial of service
escalation of privileges
information disclosure
data tampering

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

8.7

Confidence

High

EPSS

0

Percentile

5.1%

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler which may lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

Affected configurations

Nvd
Node
nvidiavirtual_gpuRange<11.12
OR
nvidiavirtual_gpuRange13.013.7
OR
nvidiavirtual_gpuRange15.015.2
AND
linuxlinux_kernelMatch-
VendorProductVersionCPE
nvidiavirtual_gpu*cpe:2.3:a:nvidia:virtual_gpu:*:*:*:*:*:*:*:*
linuxlinux_kernel-cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

8.7

Confidence

High

EPSS

0

Percentile

5.1%