GPU Display Driver: Local privesc to host root (kernel buffer overflow)

CVSS 7.8CVE-2023-0182NVIDIA / GPU stackcurated

Impact

Local privesc to host root (kernel buffer overflow)

Who can reach it

Any tenant with a container holding /dev/nvidia*

What to do

Driver upgrade; drain + reboot node, evict tenant workloads

References

https://nvd.nist.gov/vuln/detail/CVE-2023-0182 https://github.com/NVIDIA/product-security/tree/main/2023/5452

Related entries

GPU Display Driver: Local privesc (kernel buffer over-read)CVE-2024-0071 · GPU Display DriverHigh
GPU Display Driver: Local privesc (improper privilege management)CVE-2024-0073 · GPU Display DriverHigh
GPU Display Driver: Local privesc (improper resource validation / uninit memory)CVE-2024-0089 · GPU Display DriverHigh
GPU Display Driver: Local privesc to host root (OOB write)CVE-2024-0090 · GPU Display DriverHigh
GPU Display Driver: Local privesc to host root (use-after-free)CVE-2024-0091 · GPU Display DriverHigh
GPU Display Driver: Local privesc (buffer over-read in driver)CVE-2024-0107 · GPU Display DriverHigh

All NVIDIA / GPU stack entries

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.