14146 matches found
USN-8886-1: Linux kernel (NVIDIA Tegra) vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - NVDIMM Non-Volatile Memory Device drivers; - Handshake API; - ARM32 architecture; - ARM64 architecture; - MIPS...
poc-cve-2024-0132
poc-cve-2024-0132 Среда воспроизведения: ОС: ubuntu 22.04 с драйвером nvidia Docker: v27.1.0 nvidia-container-toolkit: v1.16.1 Шаги воспроизведения: Запустите образ poc-контейнера Цель: Получить доступ к файлам хоста внутри контейнера Вызывать API демона Docker через docker.sock внутри контейнера...
CVE-2025-23266
CVE-2025-23266 CVE-2025-23266 – Полностью вооруженный эксплойт для NVIDIA Container Toolkit Ссылки https://github.com/ctrsploit/ctrsploit/tree/public/vul/cve-2025-23266...
Astra Linux – Vulnerability in Linux 5.10, Linux
In the Linux kernel, the following vulnerability has been resolved: video: fbdev: nvidiafb: Use strscpy to prevent buffer overflow Coverity reports a potential buffer overflow issue. However, given the ‘static’ scope of nvidiasetupi2cbus, it seems that this issue cannot occur after examining the...
basalt
!DOI 10.5281/zenodo.22072811https://img.shields.io/badge/DOI-10.5281/zen...
CVE-2022-34683
CVE-2022-34683 Драйвер дисплея NVIDIA GPU для Windows содержит уязвимость в обработчике уровня режима ядра nvlddmkm.sys для DxgkDdiEscape, где происходит разыменование нулевого указателя, что может привести к отказу в обслуживании. аутентификация| сложность| вектор ---|---|--- недоступно|...
CVE-2025-23266
CVE-2025-23266 Автор: Mark Mallia Целевая платформа: Ubuntu 22.04, FastAPI v2.4.3 → исправлено до v2.5.1 2025‑10‑02 1 – В двух словах: в чём суть атаки Процедура parserequest в FastAPI копирует HTTP-заголовки запроса в небольшой буфер, расположенный в стеке вызывающей стороны. Если злоумышленник...
Linux Distros Unpatched Vulnerability : CVE-2026-47573
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NVIDIA NVAPI for Windows contains a vulnerability where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to...
CVE-2023-31014_Lab
CVE-2023-31014 Implicit Intent Hijacking Lab NVIDIA GeForce NOW for Android의 CVE-2023-31014 공개 보고서를 바탕으로 만든 교육용 Android Lab이다. NVIDIA 소스코드, 실제 Action 문자열, 실제 인증정보를 포함하지 않는다. 공개 보고서에서 확인되는 사실 대상: NVIDIA GeForce NOW Android mobile/TV app 영향 버전: 6.00.32705137 6.04.33108832 수정 버전: 6.05.33200069 분류:...
Important: Red Hat Security Advisory: kernel security update
An update for kernel is now available for NVIDIA for RHEL 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...
GPU_ShellCode
gpu 포이즈닝; gpu 메모리 내부에 페이로드 숨기기. 이전에 스레드 설명thread description을 사용해 페이로드를 숨겼던 repo 이후, 저는 새로운 방법을 찾고 싶었습니다. 그래서 이제 nividia gpu 메모리를 사용하며, cuda api를 통해 페이로드가 메모리에서 발견될 필요가 없을 때 할당allocate, 쓰기write, 해제free를 수행합니다. 단계: 1- 먼저 일부 구조체struct를 설정하고 초기화한 다음, ve 핸들러를 실행해야 합니다. 2- 둘째, stageless 페이로드를 실행합니다...
NVIDIA Virtual GPU Manager Multiple Vulnerabilities (September 2026)
The NVIDIA Virtual GPU Manager software on the remote host is missing a security update. It is, therefore, affected by multiple vulnerabilities, including the following: - NVIDIA vGPU software for Windows and Linux contains a vulnerability in the GPU kernel driver where a guest may access...
CVE-2026-47548
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and...
CVE-2026-47603
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode driver where a local user may access another process's GPU channel state due to missing authorization checks. A successful exploit of this vulnerability might lead to information disclosure...
CVE-2026-47538
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the firmware where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data...
CVE-2026-47547
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the firmware where an attacker could cause improper input validation. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data...
CVE-2026-47506
NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel-mode color transform path where excessive kernel stack use occurs when evaluating YCbCr420 display emulation. A successful exploit of this vulnerability might lead to denial of service...
UBUNTU-CVE-2026-47563
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where a user could cause a NULL pointer dereference. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tamperi...
UBUNTU-CVE-2026-47508
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a user could cause an incorrect conversion between numeric types. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges,...
NVIDIA Virtual GPU Manager for Linux DoS (September 2026)
The NVIDIA Virtual GPU Manager software on the remote host is missing a security update. It is, therefore, affected by multiple vulnerabilities, including the following: - NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where a user could cause uncontrolled...