Nvidia graphics card drivers on Linux and Windows vulnerable
Nvidia has closed 13 security vulnerabilities in its GPU driver for Linux and Windows. Further patches secure vGPU.
(Image: AFANASEV IVAN/Shutterstock.com)
If attackers successfully exploit vulnerabilities in Nvidia's graphics card driver, they can crash services, gain unauthorized access to information, or even execute malicious code. Secure versions for Linux and Windows are available for download. Furthermore, the developers have closed gaps in the vGPU software.
Malicious code attacks are conceivable
According to a warning message, eight of the total 13 software vulnerabilities in the GPU driver are classified with the threat level “high.” In all cases, attackers can provoke memory errors in an unspecified way and subsequently do harm.
Nvidia vGPU is also susceptible to memory errors. So far, there are no indications from the graphics card manufacturer that attackers are already exploiting the security vulnerabilities. It is currently unknown what parameters admins can use to identify already attacked systems.
Videos by heise
To prevent possible attacks, the developers have released the following driver versions:
Linux:
- 535.309.01
- 580.159.03
- 595.71.05
Windows:
- 539.72
- 582.53
- 596.36
(des)