CVE-2024-53869 Details
Description
NVIDIA Unified Memory driver for Linux contains a vulnerability where an attacker could leak uninitialized memory. A successful exploit of this vulnerability might lead to information disclosure.
A vulnerability in the NVIDIA Unified Memory driver for Linux allows an attacker to leak uninitialized memory, potentially leading to unauthorized information disclosure. This issue is present in several different driver versions prior to the latest updates.
Users can download and install the latest NVIDIA GPU Display Driver versions through the NVIDIA Driver Downloads page. For vGPU software updates, visit the NVIDIA Licensing Portal.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Jan 28, 2025CISA-ADP
Assessed Jan 28, 2025References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://nvidia.custhelp.com/app/answers/detail/a_id/5614 | [email protected] | AdvisoryBundleRemedyVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-459 | Incomplete Cleanup | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| NVIDIA Unified Memory driver | All versions |
CPE
Remediation
| |
| NVIDIA GeForce | All versions |
CPE
Remediation
| |
| NVIDIA RTX | All versions |
CPE
Remediation
| |
| NVIDIA Quadro | All versions |
CPE
Remediation
| |
| NVIDIA NVS | All versions |
CPE
Remediation
| |
| NVIDIA Tesla | All versions |
CPE
Remediation
| |
| NVIDIA vGPU software | All versions |
CPE
Remediation
| |
| NVIDIA Virtual GPU Manager | <= 17.4 <= 16.8 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Jan 28, 2025 | New CVE Received | [email protected] |