CVE-2012-0953CWE-362

Kernel heap contents leak race in ioctl handler

Medium · published May 8, 2020

CVSS v3.1
5.0
EPSS
0%
Percentile
14.8
In the wild
Unconfirmed
What it is

A race condition was discovered in the Linux drivers for Nvidia graphics which allowed an attacker to exfiltrate kernel memory to userspace. This issue was fixed in version 295.53.

The record
Technical detail
CVSS v3.1
5.0 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00246 · 14.8th percentile
Weakness
CWE-362 · Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Published
2020-05-08T00:50Z
EPSS history
Timeline
  • 08 MAY 00:50Z
    Kernel heap contents leak race in ioctl handler
    cvelistv5