CVE-2024-0131: Medium severity Nvidia GPU kernel driver vulnerability
NVIDIA GPU kernel driver for Windows and Linux contains a vulnerability where a potential user-mode attacker could read a buffer with an incorrect length. A successful exploit of this vulnerability might lead to denial of service.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/nvidia-graphics-driversto a version that resolves this vulnerability.Fixed in 535.247.01-1~deb12u1 - Upgrade
Upgrade
debian/nvidia-graphics-driversto a version that resolves this vulnerability.Fixed in 535.230.02-1 - Upgrade
Upgrade
debian/nvidia-graphics-drivers-teslato a version that resolves this vulnerability.Fixed in 525.147.05-6 - Upgrade
Upgrade
debian/nvidia-graphics-drivers-tesla-535to a version that resolves this vulnerability.Fixed in 535.247.01-1 - Upgrade
Upgrade
debian/nvidia-open-gpu-kernel-modulesto a version that resolves this vulnerability.Fixed in 535.247.01-1~deb12u1 - Upgrade
Upgrade
debian/nvidia-open-gpu-kernel-modulesto a version that resolves this vulnerability.Fixed in 535.230.02-1 - Upgrade
Upgrade
debian/nvidia-graphics-driversto a version that resolves this vulnerability.Fixed in 535.261.03-1Fixed in 535.309.01-0+deb12u1Fixed in 550.163.01-2Fixed in 550.163.01-5.1Fixed in 550.163.01-6 - Upgrade
Upgrade
debian/nvidia-graphics-drivers-teslato a version that resolves this vulnerability.Fixed in 525.147.05-15~deb12u1Fixed in 525.147.05-19 - Upgrade
Upgrade
debian/nvidia-graphics-drivers-tesla-450to a version that resolves this vulnerability.Fixed in 450.248.02-14 - Upgrade
Upgrade
debian/nvidia-graphics-drivers-tesla-460to a version that resolves this vulnerability.Fixed in 460.106.00-24 - Upgrade
Upgrade
debian/nvidia-graphics-drivers-tesla-535to a version that resolves this vulnerability.Fixed in 535.274.02-1~deb13u1Fixed in 535.274.02-3 - Upgrade
Upgrade
debian/nvidia-open-gpu-kernel-modulesto a version that resolves this vulnerability.Fixed in 535.261.03-1Fixed in 550.163.01-2Fixed in 550.163.01-4.1 - Upgrade
Upgrade
ubuntu/nvidia-graphics-drivers-535to a version that resolves this vulnerability.Fixed in 535.230.02-0ubuntu0.20.04.1 - Upgrade
Upgrade
ubuntu/nvidia-graphics-drivers-535-serverto a version that resolves this vulnerability.Fixed in 535.230.02-0ubuntu0.20.04.3 - Upgrade
Upgrade
ubuntu/nvidia-graphics-drivers-550-serverto a version that resolves this vulnerability.Fixed in 550.144.03-0ubuntu0.20.04.1 - Upgrade
Upgrade
ubuntu/nvidia-graphics-drivers-535to a version that resolves this vulnerability.Fixed in 535.230.02-0ubuntu0.22.04.1 - Upgrade
Upgrade
ubuntu/nvidia-graphics-drivers-535-serverto a version that resolves this vulnerability.Fixed in 535.230.02-0ubuntu0.22.04.3 - Upgrade
Upgrade
ubuntu/nvidia-graphics-drivers-550to a version that resolves this vulnerability.Fixed in 550.144.03-0ubuntu0.22.04.1 - Upgrade
Upgrade
ubuntu/nvidia-graphics-drivers-550-serverto a version that resolves this vulnerability.Fixed in 550.144.03-0ubuntu0.22.04.1 - Upgrade
Upgrade
ubuntu/nvidia-graphics-drivers-535to a version that resolves this vulnerability.Fixed in 535.230.02-0ubuntu0.24.04.1 - Upgrade
Upgrade
ubuntu/nvidia-graphics-drivers-535-serverto a version that resolves this vulnerability.Fixed in 535.230.02-0ubuntu0.24.04.3 - Upgrade
Upgrade
ubuntu/nvidia-graphics-drivers-550to a version that resolves this vulnerability.Fixed in 550.144.03-0ubuntu0.24.04.1 - Upgrade
Upgrade
ubuntu/nvidia-graphics-drivers-550-serverto a version that resolves this vulnerability.Fixed in 550.144.03-0ubuntu0.24.04.1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-0131?
CVE-2024-0131 is considered a high severity vulnerability due to its potential to allow denial of service.
How do I fix CVE-2024-0131?
To mitigate CVE-2024-0131, users should update to the latest version of the NVIDIA GPU kernel driver as soon as it is available.
What type of vulnerability is CVE-2024-0131?
CVE-2024-0131 is a buffer read vulnerability within the NVIDIA GPU kernel driver.
What systems are affected by CVE-2024-0131?
CVE-2024-0131 affects both Windows and Linux systems running the NVIDIA GPU kernel driver.
Can exploitation of CVE-2024-0131 lead to data loss?
While exploitation of CVE-2024-0131 can lead to denial of service, it does not directly result in data loss.