CVE-2024-0086

CVSS v3 5.5 MEDIUM

5.5^/10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

VIDIA vGPU software for Linux contains a vulnerability where the software can dereference a NULL pointer. A successful exploit of this vulnerability might lead to denial of service and undefined behavior in the vGPU plugin.

References

Link	Resource
https://nvidia.custhelp.com/app/answers/detail/a_id/5551	Third Party Advisory
https://nvidia.custhelp.com/app/answers/detail/a_id/5551	Third Party Advisory

Configurations

Configuration 1 (hide)

AND

OR	cpe:2.3:a:nvidia:virtual_gpu::::::::
	cpe:2.3:a:nvidia:virtual_gpu::::::::
	cpe:2.3:a:nvidia:virtual_gpu::::::::

OR	cpe:2.3:o:canonical:ubuntu_linux:-:::::::*
	cpe:2.3:o:citrix:hypervisor:-:::::::*
	cpe:2.3:o:redhat:enterprise_linux_kernel-based_virtual_machine:-:::::::*
	cpe:2.3:o:vmware:vsphere:-:::::::*

Configuration 2 (hide)

AND

cpe:2.3:a:nvidia:cloud_gaming:*:*:*:*:*:*:*:*

OR	cpe:2.3:o:redhat:enterprise_linux_kernel-based_virtual_machine:-:::::::*
	cpe:2.3:o:vmware:vsphere:-:::::::*

History

21 Nov 2024, 08:45

Type	Values Removed	Values Added
References	~~() https://nvidia.custhelp.com/app/answers/detail/a_id/5551 - Third Party Advisory~~	() https://nvidia.custhelp.com/app/answers/detail/a_id/5551 - Third Party Advisory

15 Aug 2024, 22:05

Type	Values Removed	Values Added
References	~~() https://nvidia.custhelp.com/app/answers/detail/a_id/5551 -~~	() https://nvidia.custhelp.com/app/answers/detail/a_id/5551 - Third Party Advisory
CPE		cpe:2.3:a:nvidia:cloud_gaming:::::::: cpe:2.3:o:canonical:ubuntu_linux:-:::::::* cpe:2.3:a:nvidia:virtual_gpu:::::::: cpe:2.3:o:vmware:vsphere:-:::::::* cpe:2.3:o:redhat:enterprise_linux_kernel-based_virtual_machine:-:::::::* cpe:2.3:o:citrix:hypervisor:-:::::::*
First Time		Vmware vsphere Citrix Nvidia Nvidia virtual Gpu Canonical ubuntu Linux Redhat enterprise Linux Kernel-based Virtual Machine Nvidia cloud Gaming Canonical Citrix hypervisor Vmware Redhat

17 Jun 2024, 12:43

Type	Values Removed	Values Added
Summary		(es) El software NVIDIA vGPU para Linux contiene una vulnerabilidad en la que el software puede eliminar la referencia a un puntero NULL. Una explotación exitosa de esta vulnerabilidad podría provocar una denegación de servicio y un comportamiento indefinido en el complemento vGPU.