CVE-2024-0126: Input Validation
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability which could allow a privileged attacker to escalate permissions. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/nvidia-graphics-driversto a version that resolves this vulnerability.Fixed in 535.216.01-1~deb12u1 - Upgrade
Upgrade
debian/nvidia-graphics-driversto a version that resolves this vulnerability.Fixed in 535.216.01-1 - Upgrade
Upgrade
debian/nvidia-graphics-drivers-teslato a version that resolves this vulnerability.Fixed in 525.147.05-6 - Upgrade
Upgrade
debian/nvidia-open-gpu-kernel-modulesto a version that resolves this vulnerability.Fixed in 535.216.01-1~deb12u1 - Upgrade
Upgrade
debian/nvidia-open-gpu-kernel-modulesto a version that resolves this vulnerability.Fixed in 535.216.01-1 - Upgrade
Upgrade
debian/nvidia-graphics-driversto a version that resolves this vulnerability.Fixed in 535.261.03-1Fixed in 535.309.01-0+deb12u1Fixed in 550.163.01-2Fixed in 550.163.01-5.1Fixed in 550.163.01-6 - Upgrade
Upgrade
debian/nvidia-graphics-drivers-teslato a version that resolves this vulnerability.Fixed in 525.147.05-15~deb12u1Fixed in 525.147.05-19 - Upgrade
Upgrade
debian/nvidia-graphics-drivers-tesla-450to a version that resolves this vulnerability.Fixed in 450.248.02-14 - Upgrade
Upgrade
debian/nvidia-graphics-drivers-tesla-460to a version that resolves this vulnerability.Fixed in 460.106.00-24 - Upgrade
Upgrade
debian/nvidia-open-gpu-kernel-modulesto a version that resolves this vulnerability.Fixed in 535.261.03-1Fixed in 550.163.01-2Fixed in 550.163.01-4.1 - Upgrade
Upgrade
ubuntu/nvidia-graphics-drivers-535to a version that resolves this vulnerability.Fixed in 535.230.02-0ubuntu0.20.04.1 - Upgrade
Upgrade
ubuntu/nvidia-graphics-drivers-535-serverto a version that resolves this vulnerability.Fixed in 535.216.01-0ubuntu0.20.04.1 - Upgrade
Upgrade
ubuntu/nvidia-graphics-drivers-535to a version that resolves this vulnerability.Fixed in 535.230.02-0ubuntu0.22.04.1 - Upgrade
Upgrade
ubuntu/nvidia-graphics-drivers-535-serverto a version that resolves this vulnerability.Fixed in 535.216.01-0ubuntu0.22.04.1 - Upgrade
Upgrade
ubuntu/nvidia-graphics-drivers-535to a version that resolves this vulnerability.Fixed in 535.230.02-0ubuntu0.24.04.1 - Upgrade
Upgrade
ubuntu/nvidia-graphics-drivers-535-serverto a version that resolves this vulnerability.Fixed in 535.216.01-0ubuntu0.24.04.1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-0126?
CVE-2024-0126 is considered a critical vulnerability due to its potential for escalation of privileges and code execution.
How do I fix CVE-2024-0126?
To fix CVE-2024-0126, users should update their NVIDIA GPU Display Driver to the latest available version released by NVIDIA.
Who is affected by CVE-2024-0126?
CVE-2024-0126 affects users of the NVIDIA GPU Display Driver on both Windows and Linux operating systems.
What are the potential consequences of CVE-2024-0126?
Exploiting CVE-2024-0126 could lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.
Is there a workaround for CVE-2024-0126 until a fix is applied?
Currently, there are no published workarounds for CVE-2024-0126, so updating the driver is the recommended action.