All versions of NVIDIA GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys for Windows or nvidia.ko for Linux) where a user can cause a GPU interrupt storm, leading to a denial of service.

USN-3173-1 fixed a vulnerability in nvidia-graphics-drivers-304 and nvidia-graphics-drivers-340. This update provides the corresponding update for nvidia-graphics-drivers-375.

It was discovered that the NVIDIA graphics drivers contained a flaw in the kernel mode layer. A local attacker could use this issue to cause a denial of service.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

It was discovered that the NVIDIA graphics drivers contained a flaw in the kernel mode layer. A local attacker could use this issue to cause a denial of service.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The version of the NVIDIA GPU display driver installed on the remote Windows host is 340.x prior to 342.01 or 375.x prior to 376.33. It is, therefore, affected by multiple vulnerabilities :

  - A flaw exists in the kernel mode layer (nvlddmkm.sys)     handler for DxgDdiEscape due to improper access     controls. A local attacker can exploit this to access     arbitrary memory and thereby gain elevated privileges.
    (CVE-2016-8821)

  - A flaw exists in the kernel mode layer (nvlddmkm.sys)     handler for DxgDdiEscape IDs 0x600000E, 0x600000F, and     0x6000010 due to improper validation of user-supplied     input that is used as an index to an internal array. A     local attacker can exploit this to corrupt memory,     resulting in a denial of service condition or an     escalation of privileges. (CVE-2016-8822)

  - Multiple buffer overflow conditions exist in the kernel     mode layer (nvlddmkm.sys) handler for DxgDdiEscape due     to improper validation of an input buffer size. A local     attacker can exploit these to cause a denial of service     condition or the execution of arbitrary code.
    (CVE-2016-8823, CVE-2016-8825)

  - A flaw exists in the kernel mode layer (nvlddmkm.sys)     handler for DxgDdiEscape due to improper access     controls. A local attacker can exploit this to write to     restricted portions of the registry and thereby gain     elevated privileges. (CVE-2016-8824)

  - A flaw exists in the nvlddmkm.sys driver that allows a     local attacker to cause GPU interrupt saturation,     resulting in a denial of service condition.
    (CVE-2016-8826)

The version of the NVIDIA GPU display driver installed on the remote Linux host is 304.x prior to 304.134, 340.x prior to 340.101, 361.x prior to 361.107 (Tesla P100), 375.x prior to 375.20 (Tesla P100), or 375.x prior to 370.26. It is, therefore, affected by a denial of service vulnerability due to a flaw in the kernel mode layer (nvidia.ko) driver. A local attacker can exploit this to cause GPU interrupt saturation, resulting in a denial of service condition.

ID	Name	Product	Family	Severity
97852	Ubuntu 14.04 LTS / 16.04 LTS : NVIDIA graphics drivers vulnerability (USN-3173-2)	Nessus	Ubuntu Local Security Checks	medium
96605	Ubuntu 14.04 LTS / 16.04 LTS : NVIDIA graphics drivers vulnerability (USN-3173-1)	Nessus	Ubuntu Local Security Checks	medium
96002	NVIDIA Windows GPU Display Driver 340.x < 342.01 / 375.x < 376.33 Multiple Vulnerabilities	Nessus	Windows	high
96001	NVIDIA Linux GPU Display Driver 304.x < 304.134 / 340.x < 340.101 / 361.x < 361.107 / 375.x < 375.26 GPU Interrupt Saturation DoS	Nessus	Misc.	medium

Detections

Analytics

CVE-2016-8826

medium

Tenable Plugins

medium

medium

high

medium