CVE-2016-7389
Publication date 19 October 2019
Last updated 24 July 2024
Ubuntu priority
Cvss 3 Severity Score
For the NVIDIA Quadro, NVS, GeForce, and Tesla products, NVIDIA GPU Display Driver on Linux R304 before 304.132, R340 before 340.98, R367 before 367.55, R361_93 before 361.93.03, and R370 before 370.28 contains a vulnerability in the kernel mode layer (nvidia.ko) handler for mmap() where improper input validation may allow users to gain access to arbitrary physical memory, leading to an escalation of privileges.
Status
Package | Ubuntu Release | Status |
---|---|---|
nvidia-graphics-drivers | ||
16.04 LTS xenial | Not in release | |
14.04 LTS trusty | Not in release | |
nvidia-graphics-drivers-173 | ||
16.04 LTS xenial | Not in release | |
14.04 LTS trusty | Not in release | |
nvidia-graphics-drivers-173-updates | ||
16.04 LTS xenial | Not in release | |
14.04 LTS trusty | Not in release | |
nvidia-graphics-drivers-304 | ||
16.04 LTS xenial |
Fixed 304.132-0ubuntu0.16.04.2
|
|
14.04 LTS trusty |
Fixed 304.132-0ubuntu0.14.04.2
|
|
nvidia-graphics-drivers-304-updates | ||
16.04 LTS xenial |
Not affected
|
|
14.04 LTS trusty |
Fixed 304.132-0ubuntu0.12.04.1
|
|
nvidia-graphics-drivers-310-updates | ||
16.04 LTS xenial | Not in release | |
14.04 LTS trusty | Not in release | |
nvidia-graphics-drivers-319 | ||
16.04 LTS xenial | Not in release | |
14.04 LTS trusty | Not in release | |
nvidia-graphics-drivers-319-updates | ||
16.04 LTS xenial | Not in release | |
14.04 LTS trusty | Not in release | |
nvidia-graphics-drivers-331 | ||
16.04 LTS xenial | Not in release | |
14.04 LTS trusty | Not in release | |
nvidia-graphics-drivers-331-updates | ||
16.04 LTS xenial | Not in release | |
14.04 LTS trusty | Not in release | |
nvidia-graphics-drivers-340 | ||
16.04 LTS xenial |
Fixed 340.98-0ubuntu0.16.04.1
|
|
14.04 LTS trusty |
Fixed 340.98-0ubuntu0.14.04.1
|
|
nvidia-graphics-drivers-340-updates | ||
16.04 LTS xenial |
Fixed 340.98-0ubuntu0.16.04.1
|
|
14.04 LTS trusty |
Fixed 340.98-0ubuntu0.14.04.1
|
|
nvidia-graphics-drivers-346 | ||
16.04 LTS xenial | Not in release | |
14.04 LTS trusty | Not in release | |
nvidia-graphics-drivers-346-updates | ||
16.04 LTS xenial | Not in release | |
14.04 LTS trusty | Not in release | |
nvidia-graphics-drivers-352 | ||
16.04 LTS xenial |
Fixed 367.57-0ubuntu0.16.04.1
|
|
14.04 LTS trusty |
Fixed 367.57-0ubuntu0.14.04.1
|
|
nvidia-graphics-drivers-352-updates | ||
16.04 LTS xenial |
Fixed 367.57-0ubuntu0.16.04.1
|
|
14.04 LTS trusty |
Fixed 367.57-0ubuntu0.14.04.1
|
|
nvidia-graphics-drivers-361 | ||
16.04 LTS xenial |
Fixed 367.57-0ubuntu0.16.04.1
|
|
14.04 LTS trusty | Not in release | |
nvidia-graphics-drivers-96 | ||
16.04 LTS xenial | Not in release | |
14.04 LTS trusty | Not in release | |
nvidia-graphics-drivers-96-updates | ||
16.04 LTS xenial | Not in release | |
14.04 LTS trusty | Not in release | |
nvidia-graphics-drivers-experimental-304 | ||
16.04 LTS xenial | Not in release | |
14.04 LTS trusty | Not in release | |
nvidia-graphics-drivers-experimental-310 | ||
16.04 LTS xenial | Not in release | |
14.04 LTS trusty | Not in release | |
nvidia-graphics-drivers-tegra | ||
16.04 LTS xenial | Not in release | |
14.04 LTS trusty | Not in release | |
nvidia-graphics-drivers-updates | ||
16.04 LTS xenial | Not in release | |
14.04 LTS trusty | Not in release | |
Severity score breakdown
Parameter | Value |
---|---|
Base score | 7.8 · High |
Attack vector | Local |
Attack complexity | Low |
Privileges required | Low |
User interaction | None |
Scope | Unchanged |
Confidentiality | High |
Integrity impact | High |
Availability impact | High |
Vector | CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
References
Related Ubuntu Security Notices (USN)
- USN-3122-1
- NVIDIA graphics drivers vulnerabilities
- 3 November 2016