First published: Thu Nov 02 2023(Updated: )
NVIDIA vGPU software for Windows and Linux contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where a NULL-pointer dereference may lead to denial of service.
Credit: psirt@nvidia.com
Affected Software | Affected Version | How to fix |
---|---|---|
NVIDIA Virtual GPU | <13.9 | |
NVIDIA Virtual GPU | >=14.0<15.4 | |
NVIDIA Virtual GPU | >=16.0<16.2 | |
Canonical Ubuntu Linux | ||
Citrix Hypervisor | ||
Linux-kvm Kernel Virtual Machine | ||
Redhat Enterprise Linux | ||
VMware vSphere |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID for this NVIDIA vGPU software vulnerability is CVE-2023-31026.
The severity of the CVE-2023-31026 vulnerability is medium.
The affected software for the CVE-2023-31026 vulnerability is NVIDIA Virtual GPU software for Windows and Linux.
The CVE-2023-31026 vulnerability can be exploited through a NULL-pointer dereference, which may lead to denial of service.
No, Canonical Ubuntu Linux is not vulnerable to the CVE-2023-31026 vulnerability.