Lucene search

K
ubuntucveUbuntu.comUB:CVE-2024-0078
HistoryMar 27, 2024 - 12:00 a.m.

CVE-2024-0078

2024-03-2700:00:00
ubuntu.com
ubuntu.com
8
nvidia gpu
display driver
vulnerability
kernel mode layer
null-pointer dereference
denial of service
windows
linux

6.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

6.4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in
the kernel mode layer, where a user in a guest can cause a NULL-pointer
dereference in the host, which may lead to denial of service.

Notes

Author Note
mdeslaur some binary drivers are no longer support by NVidia, so they are marked as ignored here

6.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

6.4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%