Vulnerabilities > CVE-2023-31026 - NULL Pointer Dereference vulnerability in Nvidia Virtual GPU

CVSS 5.5 - MEDIUM

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

local

low complexity

nvidia

CWE-476

NVD

Published: 2023-11-02

Updated: 2024-11-21

Summary

NVIDIA vGPU software for Windows and Linux contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where a NULL-pointer dereference may lead to denial of service.

Vulnerable Configurations

Part	Description	Count
Application	Nvidia Nvidia Virtual GPU - Nvidia Virtual GPU 8.0 Nvidia Virtual GPU 8.1 Nvidia Virtual GPU 8.2 Nvidia Virtual GPU 8.3 Nvidia Virtual GPU 8.9 Nvidia Virtual GPU 8.10 Nvidia Virtual GPU 9.0 Nvidia Virtual GPU 9.1 Nvidia Virtual GPU 9.2 Nvidia Virtual GPU 9.3 Nvidia Virtual GPU 10.0 Nvidia Virtual GPU 10.1 Nvidia Virtual GPU 10.2 Nvidia Virtual GPU 11.0 Nvidia Virtual GPU 11.6 Nvidia Virtual GPU 11.7 Nvidia Virtual GPU 11.8 Nvidia Virtual GPU 11.11 Nvidia Virtual GPU 11.12 Nvidia Virtual GPU 12.0 Nvidia Virtual GPU 12.4 Nvidia Virtual GPU 13.0 Nvidia Virtual GPU 13.1 Nvidia Virtual GPU 13.2 Nvidia Virtual GPU 13.3 Nvidia Virtual GPU 13.6 Nvidia Virtual GPU 13.7 Nvidia Virtual GPU 14.0 Nvidia Virtual GPU 14.1 Nvidia Virtual GPU 14.2 Nvidia Virtual GPU 14.3 Nvidia Virtual GPU 14.4 Nvidia Virtual GPU 15.0 Nvidia Virtual GPU 15.1 Nvidia Virtual GPU 15.2 Nvidia Virtual GPU 15.3 Nvidia Virtual GPU 16.0 Nvidia Virtual GPU 16.1	39
OS	Canonical Canonical Ubuntu Linux -	1
OS	Citrix Citrix Hypervisor -	1
OS	Linux-Kvm Linux KVM Kernel Virtual Machine -	1
OS	Redhat Redhat Enterprise Linux -	1
OS	Vmware Vmware Vsphere -	1

Common Weakness Enumeration (CWE)

CWE-476 - NULL Pointer Dereference

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References