NVIDIA Display Driver for Linux Use-After-Free Vulnerability Allowing Code Execution and Privilege Escalation

A use-after-free vulnerability has been identified in the NVIDIA Display Driver for Linux. This vulnerability allows an attacker to potentially execute code, escalate privileges, tamper with data, cause a denial of service, and disclose information. It affects several different versions and branches of the driver.

Impact

Exploitation of this vulnerability could lead to unauthorized code execution, elevated privileges, data manipulation, service disruption, and unintended information exposure.

Remediation

Users can download the updated driver version from the NVIDIA Driver Downloads page. For vGPU software, updates are available through the NVIDIA Licensing Portal.