Lucene search

[email protected]CVE-2021-1056

HistoryJan 08, 2021 - 1:15 a.m.

CVE-2021-1056

2021-01-0801:15:14

CWE-276

[email protected]

web.nvd.nist.gov

nvidia

gpu

display driver

linux

kernel

vulnerability

denial of service

information disclosure

3.6 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:N/A:P

7.1 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

6.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.6%

JSON

NVIDIA GPU Display Driver for Linux, all versions, contains a vulnerability in the kernel mode layer (nvidia.ko) in which it does not completely honor operating system file system permissions to provide GPU device-level isolation, which may lead to denial of service or information disclosure.

Affected configurations

NVD

Node

nvidiagpu_driverRange390–390.141

nvidiagpu_driverRange450–450.102.04

nvidiagpu_driverRange460–460.32.03

AND

linuxlinux_kernelMatch-

Node

debiandebian_linuxMatch9.0

CPENameOperatorVersion
nvidia:gpu_drivernvidia gpu driverlt390.141
nvidia:gpu_drivernvidia gpu driverlt450.102.04
nvidia:gpu_drivernvidia gpu driverlt460.32.03

CPE	Name	Operator	Version
nvidia:gpu_driver	nvidia gpu driver	lt	390.141
nvidia:gpu_driver	nvidia gpu driver	lt	450.102.04
nvidia:gpu_driver	nvidia gpu driver	lt	460.32.03

CNA Affected

[
  {
    "vendor": "NVIDIA",
    "product": "NVIDIA GPU Display Driver",
    "versions": [
      {
        "version": "All",
        "status": "affected"
      }
    ]
  }
]