USN-4404-2: Linux kernel vulnerabilities

USN-4404-1 fixed vulnerabilities in the NVIDIA graphics drivers. This update provides the corresponding updates for the NVIDIA Linux DKMS kernel modules. Original advisory details: Thomas E. Carroll discovered that the NVIDIA Cuda grpahics driver did not properly perform access control when...

USN-4404-1 nvidia-graphics-drivers-390, nvidia-graphics-drivers-440 vulnerabilities

Thomas E. Carroll discovered that the NVIDIA Cuda grpahics driver did not properly perform access control when performing IPC. An attacker could use this to cause a denial of service or possibly execute arbitrary code. CVE-2020-5963 It was discovered that the UVM driver in the NVIDIA graphics...

CVE-2020-5973

NVIDIA Virtual GPU Manager and the guest drivers contain a vulnerability in vGPU plugin, in which there is the potential to execute privileged operations, which may lead to denial of service. This affects vGPU version 8.x prior to 8.4, version 9.x prior to 9.4 and version 10.x prior to 10.3...

PT-2020-18863

Name of the Vulnerable Software and Affected Versions NVIDIA Virtual GPU Manager versions 8.x through 8.3 NVIDIA Virtual GPU Manager versions 9.x through 9.3 NVIDIA Virtual GPU Manager versions 10.x through 10.2 Description The issue is related to a vulnerability in the vGPU plugin, which may all...

CVE-2020-5960

NVIDIA Virtual GPU Manager contains a vulnerability in the kernel module nvidia.ko, where a null pointer dereference may occur, which may lead to denial of service...

CVE-2020-5959

NVIDIA Virtual GPU Manager, all versions, contains a vulnerability in the vGPU plugin in which an input index value is incorrectly validated which may lead to denial of service...

CVE-2020-5960

NVIDIA Virtual GPU Manager contains a vulnerability in the kernel module nvidia.ko, where a null pointer dereference may occur, which may lead to denial of service...

Null pointer dereference

NVIDIA Virtual GPU Manager contains a vulnerability in the kernel module nvidia.ko, where a null pointer dereference may occur, which may lead to denial of service...

Design/Logic Flaw

NVIDIA Virtual GPU Manager, all versions, contains a vulnerability in the vGPU plugin in which an input index value is incorrectly validated which may lead to denial of service...

CVE-2020-5959

CVE-2020-5959 affects NVIDIA Virtual GPU Manager (vGPU) plugin. The input index value is incorrectly validated, which may lead to denial of service. The issue is tracked in NVIDIA’s security bulletin with a base score of 7.8 (CVSS v3, Local, Low attack complexity, Privileges required: Low, Impact...

CVE-2020-5960

NVIDIA Virtual GPU Manager contains a vulnerability in the kernel module nvidia.ko, where a null pointer dereference may occur, which may lead to denial of service...

CVE-2020-5960

CVE-2020-5960 affects NVIDIA Virtual GPU Manager, specifically the kernel module nvidia.ko, where a null pointer dereference can lead to a denial of service. The connected sources confirm this as a local-risk issue in vGPU software, with the vulnerability impacting the kernel‑mode driver. NVIDIA’...

CVE-2020-5959: Improper Validation of Array Index

NVIDIA Virtual GPU Manager, all versions, contains a vulnerability in the vGPU plugin in which an input index value is incorrectly validated which may lead to denial of service...

PT-2020-18851

Name of the Vulnerable Software and Affected Versions NVIDIA Virtual GPU Manager, all versions Description The issue is related to incorrect validation of an input index value in the vGPU plugin, which may lead to denial of service. Recommendations For all versions, update to a version that...

CVE-2020-5960: NULL Pointer Dereference

NVIDIA Virtual GPU Manager contains a vulnerability in the kernel module nvidia.ko, where a null pointer dereference may occur, which may lead to denial of service...

PT-2020-18852

Name of the Vulnerable Software and Affected Versions NVIDIA Virtual GPU Manager affected versions not specified Description The issue is related to a null pointer dereference in the kernel module nvidia.ko of the NVIDIA Virtual GPU Manager, which may lead to denial of service. Recommendations At...

NVIDIA Virtual GPU Manager vGPU Input Validation Error Vulnerability

NVIDIA Virtual GPU Manager is an NVIDIA virtual GPU management software from NVIDIA. vGPU is one of the virtual FPU components. An input validation error vulnerability exists in the vGPU plug-in in NVIDIA Virtual GPU Manager all versions, which stems from the program failing to properly validate...

PT-2020-22880

Уязвимость модуля nvidia.ko компонента NVIDIA Virtual GPU Manager драйвера виртуальных графических процессоров NVIDIA Virtual GPU связана с ошибками разыменования указателей. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

PT-2020-5537

Name of the Vulnerable Software and Affected Versions: NVIDIA Virtual GPU affected versions not specified Description: The issue is related to an uncontrolled resource consumption vulnerability in the NVIDIA Virtual GPU driver. Exploitation of this issue could allow an attacker to cause a denial ...

PT-2020-22884

Уязвимость драйвера виртуальных графических процессоров NVIDIA Virtual GPU связана с неконтролируемым расходом ресурсов. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...