A memory management software flaw in the kernel mode layer ( nvlddmkm.sys) could lead to denial of service. A validation flaw in the kernel mode layer ( nvlddmkm.sys) could lead to data tampering and denial of service. An out-of-bounds write in the ECC (error correction code) layercould lead to data tampering and denial of service. An unprivileged user could access registers available only to administrator accounts, leading to data tampering, denial of service, and information disclosure. An unprivileged user could cause an out-of-bounds read (a flaw that allows parts of the memory, which are allocated to more critical functions, to be manipulated), leading to a denial of service and information disclosure. Virtual machines and (theoretically) web browsers can trigger this vulnerability. A malformed executable or shader file exploiting the DCL_INDEXRANGE, DCL_RESOURCE_STRUCTURED, and DCL_UNORDERED_ACCESS_VIEW_STRUCTUREDfunctionalities could lead to memory corruption, data tampering, denial of service, information disclosure, and privilege escalation.
Let's look at each of the vulnerabilities up-close. This is NVIDIA honoring its promiseof continuing to provide support for these cards until September 2024-three years after the October 2021 end-of-support date. The latest release also covers updates for already unsupported GTX 600 and GTX Kepler-series cards.
Here are the lists for Windowsand Unix/Linuxfor reference for driver branch histories. NVIDIA GeForce software, Studio, RTX/Quadro, NVS, and Tesla running Windows and Linux are all affected by this update, covering driver branches R450, R470, and R510.
If exploited, they could lead to denial of service, code execution, privilege escalation, and data tampering. Last Monday, the company released a software security update for NVIDIA GPU Display Driverto address the vulnerabilities.
Multiple NVIDIA graphic card models have been found to have flaws in their GPU drivers, with six medium-and four high-severity ratings.
0 kommentar(er)
