Ubuntu 24.04 LTS : Linux kernel vulnerabilities (USN-6817-1)

The remote Ubuntu 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6817-1 advisory. Ziming Zhang discovered that the DRM driver for VMware Virtual GPU did not properly handle certain error conditions, leading to a NULL pointer dereferenc...

PT-2024-4364 · Nvidia +1 · Nvidia Vgpu +1

Name of the Vulnerable Software and Affected Versions: NVIDIA vGPU software for Windows and Linux affected versions not specified Description: The issue is related to incorrect privilege assignment in the NVIDIA Virtual GPU Manager driver, allowing an attacker to elevate privileges or cause a...

PT-2024-4363

Name of the Vulnerable Software and Affected Versions NVIDIA vGPU software for Linux affected versions not specified Description The issue is related to a buffer overrun vulnerability in the Virtual GPU Manager of the NVIDIA vGPU software for Linux. This vulnerability can be exploited by the gues...

PT-2024-4248

Name of the Vulnerable Software and Affected Versions NVIDIA vGPU software for Linux affected versions not specified Description The issue is related to insufficient control of interaction frequency in the NVIDIA Virtual GPU Manager driver, which can be exploited by an untrusted guest VM to cause...

PT-2024-4360 · Nvidia +1 · Nvidia Vgpu +2

Name of the Vulnerable Software and Affected Versions: NVIDIA vGPU software for Linux affected versions not specified NVIDIA GPU Display Driver for Linux affected versions not specified Description: The issue is related to errors in access control, allowing an attacker to execute arbitrary code,...

CVE-2024-0077

NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin, where it allows a guest OS to allocate resources for which the guest OS is not authorized. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, information...

CVE-2024-0077 CVE

NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin, where it allows a guest OS to allocate resources for which the guest OS is not authorized. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, information...

CVE-2024-0077 CVE

NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin, where it allows a guest OS to allocate resources for which the guest OS is not authorized. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, information...

CVE-2024-0077

The CVE-2024-0077 entry concerns NVIDIA Virtual GPU Manager and its vGPU plugin. Affects NVIDIA Virtual GPU Manager’s vGPU plugin where a guest OS can allocate resources for which it is not authorized. Underlying cause is not explicitly detailed in the provided documents beyond the description. I...

NVIDIA Virtual GPU Manager 安全漏洞

NVIDIA Virtual GPU Manager is an NVIDIA virtual GPU management software from NVIDIA. A security vulnerability exists in NVIDIA Virtual GPU Manager that originates from allowing a guest operating system to allocate unauthorized resources, successful exploitation of this vulnerability may result in...

CVE-2024-0077: Improper Authorization

NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin, where it allows a guest OS to allocate resources for which the guest OS is not authorized. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, information...

USN-6688-1: Linux kernel (OEM) vulnerabilities

Pratyush Yadav discovered that the Xen network backend implementation in the Linux kernel did not properly handle zero length data request, leading to a null pointer dereference vulnerability. An attacker in a guest VM could possibly use this to cause a denial of service host domain crash...

NVIDIA Virtual GPU Manager Multiple Vulnerabilities (February 2024)

The NVIDIA Virtual GPU Manager software on the remote host is missing a security update. It is, therefore, affected by multiple vulnerabilities, including the following: - NVIDIA GPU Display Driver for WIndows and Linux contains a vulnerability in the kernel mode data handler, where an unprivileg...

PT-2024-3873

Name of the Vulnerable Software and Affected Versions: NVIDIA Virtual GPU Manager affected versions not specified NVIDIA GPU Display Driver affected versions not specified Description: The issue is related to a vulnerability in the vGPU plugin of the NVIDIA Virtual GPU Manager, which allows a gue...

USN-6549-4: Linux kernel (Intel IoTG) vulnerabilities

It was discovered that the USB subsystem in the Linux kernel contained a race condition while handling device descriptors in certain situations, leading to a out-of-bounds read vulnerability. A local attacker could possibly use this to cause a denial of service system crash. CVE-2023-37453 Lin Ma...

USN-6549-3 linux-lowlatency, linux-lowlatency-hwe-5.15 vulnerabilities

It was discovered that the USB subsystem in the Linux kernel contained a race condition while handling device descriptors in certain situations, leading to a out-of-bounds read vulnerability. A local attacker could possibly use this to cause a denial of service system crash. CVE-2023-37453 Lin Ma...

USN-6549-3: Linux kernel (Low Latency) vulnerabilities

It was discovered that the USB subsystem in the Linux kernel contained a race condition while handling device descriptors in certain situations, leading to a out-of-bounds read vulnerability. A local attacker could possibly use this to cause a denial of service system crash. CVE-2023-37453 Lin Ma...

USN-6534-3: Linux kernel vulnerabilities

It was discovered that the USB subsystem in the Linux kernel contained a race condition while handling device descriptors in certain situations, leading to a out-of-bounds read vulnerability. A local attacker could possibly use this to cause a denial of service system crash. CVE-2023-37453 Lin Ma...

Ubuntu: Security Advisory (USN-6534-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-6549-2 linux-gkeop, linux-gkeop-5.15 vulnerabilities

It was discovered that the USB subsystem in the Linux kernel contained a race condition while handling device descriptors in certain situations, leading to a out-of-bounds read vulnerability. A local attacker could possibly use this to cause a denial of service system crash. CVE-2023-37453 Lin Ma...