CVE-2023-0191

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer handler, where an out-of-bounds access may lead to denial of service or data tampering.

Score

CVSS 3.1 7.1 High

Status

Modified - psirt@nvidia.com

Published

2023-04-01

Last modified

2025-02-13

Weaknesses

CWE-119, CWE-787

Affected products

• Nvidia Cloud Gaming Guest Driver - Linux (Nvidia)
• Nvidia Cloud Gaming Guest Driver - Windows (Nvidia)
• Nvidia Cloud Gaming Virtual Gpu Manager - Red Hat Enterprise Linux Kvm (Nvidia)
• Red Hat Enterprise Linux Kvm (Nvidia)
• Vgpu Software Guest Driver - Linux (Nvidia)
• Vgpu Software Guest Driver - Windows (Nvidia)
• Vgpu Software Virtual Gpu Manager - Citrix Hypervisor (Nvidia)
• Virtual Gpu (Nvidia)
• Vmware Vsphere (Nvidia)

References

• https://nvidia.custhelp.com/app/answers/detail/a_id/5452
• https://security.gentoo.org/glsa/202310-02