Design/Logic Flaw

A random memory access flaw was found in the Linux kernel's GPU i915 kernel driver functionality in the way a user may run malicious code on the GPU. This flaw allows a local user to crash the system or escalate their privileges on the system...

Buffer Overflow

chrome is vulnerable to buffer overflow. The vulnerability exists due to a memory corruption in GPU which allows an attacker to cause an application crash...

CVE-2022-0330

A random memory access flaw was found in the Linux kernel's GPU i915 kernel driver functionality in the way a user may run malicious code on the GPU. This flaw allows a local user to crash the system or escalate their privileges on the system...

CVE-2022-0330

CVE-2022-0330 affects the Linux kernel i915 GPU driver. The root cause is a missing GPU TLB flush in the i915 driver, enabling a local attacker to cause a denial of service or privilege escalation by running code on the GPU. Public documents from connected sources confirm the flaw and its associa...

CVE-2022-0330

A random memory access flaw was found in the Linux kernel's GPU i915 kernel driver functionality in the way a user may run malicious code on the GPU. This flaw allows a local user to crash the system or escalate their privileges on the system...

CVE-2022-21820

NVIDIA DCGM contains a vulnerability in nvhostengine, where a network user can cause detection of error conditions without action, which may lead to limited code execution, some denial of service, escalation of privileges, and limited impacts to both data confidentiality and integrity...

The vulnerability of the GPU Process browser processes in Microsoft Edge and Google Chrome allows attackers to execute arbitrary code or cause service interruptions.

The vulnerability of the GPU Process browser engines in Microsoft Edge and Google Chrome is related to buffer overflows during the processing of HTML content. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure by using a specially created...

NVIDIA Data Center GPU Manager has an unspecified vulnerability

NVIDIA Data Center GPU Manager is a set of data center management tools from Nvidia that allows you to manage and monitor GPU resources in accelerated data centers.A security vulnerability exists in NVIDIA Data Center GPU Manager due to a bug in nvhostengine. error. An attacker could exploit the...

NVIDIA Data Center GPU Manager 输入验证错误漏洞

NVIDIA Data Center GPU Manager is a set of data center management tools from Nvidia that allows you to manage and monitor GPU resources in accelerated data centers.A security vulnerability exists in NVIDIA Data Center GPU Manager due to a bug in nvhostengine. error. An attacker could exploit the...

kernel: possible privileges escalation due to missing TLB flush

A random memory access flaw was found in the Linux kernel’s GPU i915 kernel driver functionality in the way a user may run malicious code on the GPU. This flaw allows a local user to crash the system or escalate their privileges on the system...

Chromium: CVE-2022-0976 Heap buffer overflow in GPU

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Security Bulletin: NVIDIA Data Center GPU Manager (DCGM) - March 2022

NVIDIA has released a software update for NVIDIA® Data Center GPU Manager DCGM. The update addresses security issues that may lead to code execution, denial of service, and escalation of privileges. To protect your system, download and install the latest DCGM release from the CUDA repositories. G...

Update now! Apple fixes several serious vulnerabilities in iOS and macOS

Apple has released patches for macOS Monterey 12.3, iOS 15.4 and iPadOS 15.4. In these security updates, released on March 14, 2022, Apple tackles 39 vulnerabilities, several of which could allow an attacker to execute arbitrary code on an affected device. One of the vulnerabilities can be...

kernel: possible privileges escalation due to missing TLB flush

A random memory access flaw was found in the Linux kernel’s GPU i915 kernel driver functionality in the way a user may run malicious code on the GPU. This flaw allows a local user to crash the system or escalate their privileges on the system...

Stable Channel Update for Desktop

The Stable channel has been updated to 99.0.4844.74 for Windows, Mac and Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the log. Interested in switching release channels? Find out how here. If you find a new issue, please let us know by...

kernel: possible privileges escalation due to missing TLB flush

A random memory access flaw was found in the Linux kernel’s GPU i915 kernel driver functionality in the way a user may run malicious code on the GPU. This flaw allows a local user to crash the system or escalate their privileges on the system...

NVIDIA Linux GPU Display Driver (February 2022)

The NVIDIA GPU display driver software on the remote host is missing a security update. It is, therefore, affected by multiple vulnerabilities: - NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel driver, where improper handling of insufficient permissions or privileges ma...

NVIDIA Windows GPU Display Driver (February 2022)

A display driver installed on the remote Windows host is affected by a vulnerability: - NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for private IOCTLs where a NULL pointer dereference in the kernel, created within user mode code, ma...

Privilege Escalation

kernel is vulnerable to privilege escalation. The vulnerability exists due to the lack of sanitization of access to the i915 Intel GPU...

USN-5294-2: Linux kernel vulnerabilities | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 18.04 Description It was discovered that the Packet network protocol implementation in the Linux kernel contained a double-free vulnerability. A local attacker could use this to cause a denial of service system crash or...