Lucene search

K
ubuntucveUbuntu.comUB:CVE-2024-0079
HistoryMar 27, 2024 - 12:00 a.m.

CVE-2024-0079

2024-03-2700:00:00
ubuntu.com
ubuntu.com
9
nvidia gpu display driver
vulnerability
kernel mode layer
denial of service
windows
linux
guest vm
null-pointer dereference
exploit
cve-2024-0079

6.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

6.8 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in
the kernel mode layer, where a user in a guest VM can cause a NULL-pointer
dereference in the host. A successful exploit of this vulnerability may
lead to denial of service.

Notes

Author Note
mdeslaur some binary drivers are no longer support by NVidia, so they are marked as ignored here

6.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

6.8 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

Related for UB:CVE-2024-0079