NVIDIA Display Driver for Linux Out-of-Bounds Read Vulnerability Allowing Denial-of-Service and Information Disclosure

A vulnerability in the NVIDIA Display Driver for Linux has been identified, allowing users to cause an out-of-bounds read. Exploitation of this vulnerability could lead to a denial-of-service condition and unauthorized information disclosure.

Impact

Exploitation of this vulnerability can cause a denial-of-service condition and allow for information disclosure.

Remediation

Users can upgrade to NVIDIA Display Driver versions 595.71.05, 580.159.03, or 535.309.01 to address this vulnerability. For those using the guest driver on Linux vGPU 20, version 595.58.03 should be applied. Similarly, on vGPU 19, version 580.126.09 is recommended, and for vGPU 16, version 535.288.01 should be used. Cloud Gaming users should also upgrade to version 595.58.03.