Description (CNA)
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where an unprivileged regular user can cause truncation errors when casting a primitive to a primitive of smaller size causes data to be lost in the conversion, which may lead to denial of service or information disclosure.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| NVIDIA / vGPU software (guest driver) - Linux, vGPU software (Virtual GPU Manager), NVIDIA Cloud Gaming (guest driver), NVIDIA Cloud Gaming (Virtual GPU Manager) | affected All versions prior to and including 14.2, 13.4, and 11.9, and all versions prior to the November 2022 release |
CWE
CWE-197
References
- https://nvidia.custhelp.com/app/answers/detail/a_id/5415
- https://lists.debian.org/debian-lts-announce/2023/05/msg00010.html
- https://security.gentoo.org/glsa/202310-02
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.