CVE-2015-5053

The host memory mapping path feature in the NVIDIA GPU graphics driver R346 before 346.87 and R352 before 352.41 for Linux and R352 before 352.46 for GRID vGPU…

published November 24, 2015

CVSS
—
EPSS
2%
Percentile
77.6
In the wild
Unconfirmed
What it is

⚠️ A misconfigured NVIDIA GPU driver lets attackers slip through the cracks like a mischievous raccoon in an all-you-can-eat buffet! Think of it as a restaurant where the back door is left wide open — anyone could wander in and start devouring resources, causing chaos in the kitchen. That’s what this vulnerability does to your GPU’s memory access! An attacker could exploit this flaw to gain unauthorized access, potentially leading to resource starvation and a denial of service. This could mean your applications slow to a crawl, or worse, come to a complete standstill. Quite the headache for any system administrator!

Put simply

Think of it as a restaurant where the back door is left wide open — anyone could wander in and start devouring resources, causing chaos in the kitchen. That’s what this vulnerability does to your GPU’s memory access! This vulnerability arises from inadequate restrictions in the NVIDIA GPU graphics driver, specifically regarding the access control of third-party device IO memory through the follow_pfn kernel-mode API. This lack of proper access limits allows for privilege escalation and possible denial-of-service scenarios.

What to do

An attacker could exploit this flaw to gain unauthorized access, potentially leading to resource starvation and a denial of service. This could mean your applications slow to a crawl, or worse, come to a complete standstill. Quite the headache for any system administrator! To mitigate this issue, immediately update your NVIDIA graphics driver to versions R346.87 or R352.41 and beyond. Regularly check for driver updates to ensure you’re protected against future vulnerabilities. Don’t forget to audit your system for any unauthorized access! You've got this! Keep your systems updated and secure to stay ahead of the game. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01746 · 77.6th percentile
Published
2015-11-24T20:00Z
EPSS history
Timeline
  • 24 NOV 20:00Z
    The host memory mapping path feature in the NVIDIA GPU graphics driver R346 before 346.87 and R352 before 352.41 for Linux and R352 before 352.46 for GRID vGPU…
    cvelistv5