CVE-2024-0127

Description

NVIDIA vGPU software contains a vulnerability in the GPU kernel driver of the vGPU Manager for all supported hypervisors, where a user of the guest OS can cause an improper input validation by compromising the guest OS kernel. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure.

Reserved 2023-12-02 | Published 2024-10-26 | Updated 2024-11-01 | Assigner nvidia

Problem types

CWE-20 Improper Input Validation

Product status

Default status
unaffected

All versions prior to 17.4, 16.8, and the October 2024 release
affected

References

nvidia.custhelp.com/app/answers/detail/a_id/5586

cve.org (CVE-2024-0127)

nvd.nist.gov (CVE-2024-0127)

Download JSON