CVEvulnerability

CVE-2015-5053

10.0 HIGH Published 2015-11-24 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2015-11-24
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-284

Description

The host memory mapping path feature in the NVIDIA GPU graphics driver R346 before 346.87 and R352 before 352.41 for Linux and R352 before 352.46 for GRID vGPU and vSGA does not properly restrict access to third-party device IO memory, which allows attackers to gain privileges, cause a denial of service (resource consumption), or possibly have unspecified other impact via unknown vectors related to the follow_pfn kernel-mode API call.

Affected configurations

• nvidia gpu driver 346.16 • nvidia gpu driver 346.22 • nvidia gpu driver 346.35 • nvidia gpu driver 346.47 • nvidia gpu driver 346.59 • nvidia gpu driver 346.72 • nvidia gpu driver 346.82 • nvidia gpu driver 352.09 • nvidia gpu driver 352.21 • nvidia gpu driver 352.30 • nvidia gpu driver 352.41

Related

Weakness · CWE (1)

  • CWE-284 Improper Access Control weakness

References