CVE-2024-0127 - NVIDIA vGPU software contains a vulnerability in the GPU kernel driver of the vGPU Manager for all supported hypervisors, where a user of the guest OS can cause an improper input validation by compromising the guest OS kernel

Back Back to CVE browser

HIGH

NVIDIA vGPU software contains a vulnerability in the GPU kernel driver of the vGPU Manager for all supported hypervisors, where a user of the guest OS can cause an improper input validation by compromising the guest OS kernel

Published Oct 26, 2024

7.8

HIGH

CVSS 3.1

EPSS 0.19%

Description

NVIDIA vGPU software contains a vulnerability in the GPU kernel driver of the vGPU Manager for all supported hypervisors, where a user of the guest OS can cause an improper input validation by compromising the guest OS kernel. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure.

Affected products

Vendor NVIDIA Product vGPU and Cloud Gaming Default
unaffected
Affected
- All versions prior to 17.4, 16.8, and the October 2024 release

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
NVIDIA	vGPU and Cloud Gaming	unaffected	Affected All versions prior to 17.4, 16.8, and the October 2024 release

Vendor NVIDIA Product Cloud Gaming Virtual Gpu Default
unaffected
Affected
- ≥ 0, < 565.57.01
Vendor NVIDIA Product Virtual Gpu Manager Default
unaffected
Affected
- ≥ 0, < 16.8
- ≥ 17.0, < 17.4