rpm package
opensuse/nvidia-open-driver-G07-signed&distro=openSUSE Tumbleweed
pkg:rpm/opensuse/nvidia-open-driver-G07-signed&distro=openSUSE%20Tumbleweed
Vulnerabilities (9)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2025-23286 | Med | 4.4 | < 590.44.01-1.1 | 590.44.01-1.1 | Aug 2, 2025 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where an attacker could read invalid memory. A successful exploit of this vulnerability might lead to information disclosure. | |
| CVE-2025-23283 | Hig | 7.8 | < 590.44.01-1.1 | 590.44.01-1.1 | Aug 2, 2025 | NVIDIA vGPU software for Linux-style hypervisors contains a vulnerability in the Virtual GPU Manager, where a malicious guest could cause stack buffer overflow. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, i | |
| CVE-2025-23279 | Hig | 7.0 | < 590.44.01-1.1 | 590.44.01-1.1 | Aug 2, 2025 | NVIDIA .run Installer for Linux and Solaris contains a vulnerability where an attacker could use a race condition to escalate privileges. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, denial of service, | |
| CVE-2025-23278 | Hig | 7.1 | < 590.44.01-1.1 | 590.44.01-1.1 | Aug 2, 2025 | NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker might cause an improper index validation by issuing a call with crafted parameters. A successful exploit of this vulnerability might lead to data tampering or denial of service. | |
| CVE-2025-23277 | Hig | 7.3 | < 590.44.01-1.1 | 590.44.01-1.1 | Aug 2, 2025 | NVIDIA Display Driver for Linux and Windows contains a vulnerability in the kernel mode driver, where an attacker could access memory outside bounds permitted under normal use cases. A successful exploit of this vulnerability might lead to denial of service, data tampering, or in | |
| CVE-2024-0131 | Med | 4.4 | < 590.44.01-1.1 | 590.44.01-1.1 | Feb 2, 2025 | NVIDIA GPU kernel driver for Windows and Linux contains a vulnerability where a potential user-mode attacker could read a buffer with an incorrect length. A successful exploit of this vulnerability might lead to denial of service. | |
| CVE-2024-0150 | Hig | 7.1 | < 590.44.01-1.1 | 590.44.01-1.1 | Jan 28, 2025 | NVIDIA GPU display driver for Windows and Linux contains a vulnerability where data is written past the end or before the beginning of a buffer. A successful exploit of this vulnerability might lead to information disclosure, denial of service, or data tampering. | |
| CVE-2024-0091 | — | < 590.44.01-1.1 | 590.44.01-1.1 | Jun 13, 2024 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where a user can cause an untrusted pointer dereference by executing a driver API. A successful exploit of this vulnerability might lead to denial of service, information disclosure, and data tampering. | ||
| CVE-2024-0090 | — | < 590.44.01-1.1 | 590.44.01-1.1 | Jun 13, 2024 | NVIDIA GPU driver for Windows and Linux contains a vulnerability where a user can cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering. |
- affected < 590.44.01-1.1fixed 590.44.01-1.1
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where an attacker could read invalid memory. A successful exploit of this vulnerability might lead to information disclosure.
- affected < 590.44.01-1.1fixed 590.44.01-1.1
NVIDIA vGPU software for Linux-style hypervisors contains a vulnerability in the Virtual GPU Manager, where a malicious guest could cause stack buffer overflow. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, i
- affected < 590.44.01-1.1fixed 590.44.01-1.1
NVIDIA .run Installer for Linux and Solaris contains a vulnerability where an attacker could use a race condition to escalate privileges. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, denial of service,
- affected < 590.44.01-1.1fixed 590.44.01-1.1
NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker might cause an improper index validation by issuing a call with crafted parameters. A successful exploit of this vulnerability might lead to data tampering or denial of service.
- affected < 590.44.01-1.1fixed 590.44.01-1.1
NVIDIA Display Driver for Linux and Windows contains a vulnerability in the kernel mode driver, where an attacker could access memory outside bounds permitted under normal use cases. A successful exploit of this vulnerability might lead to denial of service, data tampering, or in
- affected < 590.44.01-1.1fixed 590.44.01-1.1
NVIDIA GPU kernel driver for Windows and Linux contains a vulnerability where a potential user-mode attacker could read a buffer with an incorrect length. A successful exploit of this vulnerability might lead to denial of service.
- affected < 590.44.01-1.1fixed 590.44.01-1.1
NVIDIA GPU display driver for Windows and Linux contains a vulnerability where data is written past the end or before the beginning of a buffer. A successful exploit of this vulnerability might lead to information disclosure, denial of service, or data tampering.
- CVE-2024-0091Jun 13, 2024affected < 590.44.01-1.1fixed 590.44.01-1.1
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where a user can cause an untrusted pointer dereference by executing a driver API. A successful exploit of this vulnerability might lead to denial of service, information disclosure, and data tampering.
- CVE-2024-0090Jun 13, 2024affected < 590.44.01-1.1fixed 590.44.01-1.1
NVIDIA GPU driver for Windows and Linux contains a vulnerability where a user can cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.