CVE-2023-0198

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where improper restriction of operations within the bounds of a memory buffer can lead to denial of service, information disclosure, and data tampering.

Score

CVSS 3.1 7.8 High

Status

Modified - psirt@nvidia.com

Published

2023-04-01

Last modified

2025-02-13

Weaknesses

CWE-119

Affected products

• Nvidia Cloud Gaming Guest Driver - Linux (Nvidia)
• Nvidia Cloud Gaming Virtual Gpu Manager - Red Hat Enterprise Linux Kvm (Nvidia)
• Red Hat Enterprise Linux Kvm (Nvidia)
• Vgpu Software Guest Driver - Linux (Nvidia)
• Vgpu Software Virtual Gpu Manager - Citrix Hypervisor (Nvidia)
• Virtual Gpu (Nvidia)
• Vmware Vsphere (Nvidia)

References

• https://nvidia.custhelp.com/app/answers/detail/a_id/5452
• https://security.gentoo.org/glsa/202310-02