CVE-2015-5053
Critical
Description
The host memory mapping path feature in the NVIDIA GPU graphics driver R346 before 346.87 and R352 before 352.41 for Linux and R352 before 352.46 for GRID vGPU and vSGA does not properly restrict access to third-party device IO memory, which allows attackers to gain privileges, cause a denial of service (resource consumption), or possibly have unspecified other impact via unknown vectors related to the follow_pfn kernel-mode API call.
SeverityCritical
CVSS10.0
Exploit probability78. percentile1.7%
ProductNvidia Gpu Driver
PublishedNov 24, 2015
First seenNov 24, 2015
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| nvidia gpu_driver | 346.16, 346.22, 346.35, 346.47, 346.59, 346.72, 346.82, 352.09, 352.21, 352.30, 352.41 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.