Lucene search

K
ubuntucveUbuntu.comUB:CVE-2024-0093
HistoryJun 13, 2024 - 12:00 a.m.

CVE-2024-0093

2024-06-1300:00:00
ubuntu.com
ubuntu.com
4
nvidia gpu
linux
vulnerability
sensitive information
exploit
information disclosure
actor
authorization
binary drivers
ignored
unix

6.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

6.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

NVIDIA GPU software for Linux contains a vulnerability where it can expose
sensitive information to an actor that is not explicitly authorized to have
access to that information. A successful exploit of this vulnerability
might lead to information disclosure.

Notes

Author Note
mdeslaur some binary drivers are no longer support by NVidia, so they are marked as ignored here only affects vGPU manager

6.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

6.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

Related for UB:CVE-2024-0093