First published: Thu Jun 13 2024(Updated: )
NVIDIA GPU software for Linux contains a vulnerability where it can expose sensitive information to an actor that is not explicitly authorized to have access to that information. A successful exploit of this vulnerability might lead to information disclosure.
Credit: psirt@nvidia.com
Affected Software | Affected Version | How to fix |
---|---|---|
All of | ||
Any of | ||
Nvidia Virtual GPU Graphics Driver | <13.11 | |
Nvidia Virtual GPU Graphics Driver | >=14.0<16.6 | |
Nvidia Virtual GPU Graphics Driver | >=17.0<17.2 | |
Any of | ||
Ubuntu | ||
Citrix Hypervisor | ||
Red Hat Enterprise Linux Kernel-based Virtual Machine | ||
VMware vSphere | ||
All of | ||
NVIDIA Cloud Gaming | <555.52.04 | |
Any of | ||
Red Hat Enterprise Linux Kernel-based Virtual Machine | ||
VMware vSphere |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2024-0093 has a severity rating that indicates it can potentially lead to information disclosure.
To fix CVE-2024-0093, you should update your NVIDIA GPU software to the latest version recommended by NVIDIA.
CVE-2024-0093 affects various versions of NVIDIA vGPU Software, NVIDIA Cloud Gaming, and specific Linux distributions running these software.
CVE-2024-0093 can expose sensitive information to unauthorized actors.
Yes, versions of NVIDIA vGPU Software up to 13.11 and specific ranges of 14.0 to 17.2 are susceptible to CVE-2024-0093.