CVE-2024-0090

2024-06-1300:00:00

ubuntu.com

nvidia gpu driver

vulnerability

out-of-bounds write

code execution

denial of service

privilege escalation

information disclosure

data tampering

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.6 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

NVIDIA GPU driver for Windows and Linux contains a vulnerability where a
user can cause an out-of-bounds write. A successful exploit of this
vulnerability might lead to code execution, denial of service, escalation
of privileges, information disclosure, and data tampering.

Bugs

Notes

Author	Note
mdeslaur	some binary drivers are no longer support by NVidia, so they are marked as ignored here

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchnvidia-graphics-drivers-470< anyUNKNOWN
ubuntu20.04noarchnvidia-graphics-drivers-470< anyUNKNOWN
ubuntu22.04noarchnvidia-graphics-drivers-470< anyUNKNOWN
ubuntu24.04noarchnvidia-graphics-drivers-470< 470.256.02-0ubuntu0.24.04.1UNKNOWN
ubuntu18.04noarchnvidia-graphics-drivers-470-server< anyUNKNOWN
ubuntu20.04noarchnvidia-graphics-drivers-470-server< anyUNKNOWN
ubuntu22.04noarchnvidia-graphics-drivers-470-server< anyUNKNOWN
ubuntu24.04noarchnvidia-graphics-drivers-470-server< 470.256.02-0ubuntu0.23.04.1UNKNOWN
ubuntu20.04noarchnvidia-graphics-drivers-535< 535.183.01-0ubuntu0.20.04.1UNKNOWN
ubuntu22.04noarchnvidia-graphics-drivers-535< 535.183.01-0ubuntu0.22.04.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	18.04	noarch	nvidia-graphics-drivers-470	< any	UNKNOWN
ubuntu	20.04	noarch	nvidia-graphics-drivers-470	< any	UNKNOWN
ubuntu	22.04	noarch	nvidia-graphics-drivers-470	< any	UNKNOWN
ubuntu	24.04	noarch	nvidia-graphics-drivers-470	< 470.256.02-0ubuntu0.24.04.1	UNKNOWN
ubuntu	18.04	noarch	nvidia-graphics-drivers-470-server	< any	UNKNOWN
ubuntu	20.04	noarch	nvidia-graphics-drivers-470-server	< any	UNKNOWN
ubuntu	22.04	noarch	nvidia-graphics-drivers-470-server	< any	UNKNOWN
ubuntu	24.04	noarch	nvidia-graphics-drivers-470-server	< 470.256.02-0ubuntu0.23.04.1	UNKNOWN
ubuntu	20.04	noarch	nvidia-graphics-drivers-535	< 535.183.01-0ubuntu0.20.04.1	UNKNOWN
ubuntu	22.04	noarch	nvidia-graphics-drivers-535	< 535.183.01-0ubuntu0.22.04.1	UNKNOWN