CVE-2023-0197

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a malicious user in a guest VM can cause a NULL-pointer dereference, which may lead to denial of service.

Score

CVSS 3.1 6.5 Medium

Status

Modified - psirt@nvidia.com

Published

2023-04-01

Last modified

2025-02-11

Weaknesses

CWE-476

Affected products

• Nvidia Cloud Gaming Virtual Gpu Manager - Red Hat Enterprise Linux Kvm (Nvidia)
• Red Hat Enterprise Linux Kvm (Nvidia)
• Vgpu Software Virtual Gpu Manager - Citrix Hypervisor (Nvidia)
• Virtual Gpu (Nvidia)
• Vmware Vsphere (Nvidia)

References

• https://nvidia.custhelp.com/app/answers/detail/a_id/5452