Nvidia GPU owners told to update now to patch a range of serious security flaws

Date:
Tue, 29 Oct 2024 19:30:00 +0000

Description:
Nvidia addresses eight vulnerabilities plaguing Windows and Linux ecosystems.

FULL STORY ======================================================================

Nvidia has released a new patch for its GPU Display Driver for Windows and Linux to fix a handful of rather serious vulnerabilities.

If exploited, the vulnerabilities mostly lead to code execution, denial of service, escalation of privileges, information disclosure, and data
tampering, which means they are rather serious. Among them is CVE20240126, which has a severity score of 8.2 (high severity).

Another six vulnerabilities are scored 7.8, while the final one is scored
7.1. Of the total eight flaws, five affect the Windows ecosystem. They are
all user mode layer exploits, in which threat actors could initiate out-of-bound reads and thus execute code remotely. One exploit was for both Windows and Linux. Smash and grab

The details about the vulnerabilities and how they can be exploited can be found on Nvidias security bulletin, here . There was no word of in-the-wild abuse, so were guessing crooks havent abused these bugs just yet.

However, with Nvidias popularity and prevalence, it is now only a matter of time before miscreants start looking for vulnerable endpoints to exploit.

GPUs are a popular target among cybercriminals, and not just those built by Nvidia. For example, in September 2023, security researchers warned of a flaw found in GPUs from all major manufacturers, which allowed hackers to read sensitive data displayed in browsers. Furthermore, in June 2024, ARM said it had found vulnerabilities in Bifrost and Valhall GPU kernel drivers being exploited in the wild.

At the time, the vulnerability was two years old, yet many users did not
patch it on time.

Running regular updates to both software and hardware is one of the best ways to prevent cyberattacks. Users are advised to download and install the software update through the Driver Downloads page or, for the vGPU software and Cloud Gaming updates, through the Licensing Portal. More from TechRadar Pro Almost all top GPUs are at risk of this dangerous cyberattack - here's what you need to know Here's a list of the best firewalls today These are the best endpoint protection tools right now



======================================================================
Link to news story: https://www.techradar.com/pro/security/nvidia-gpu-owners-told-to-update-now-to -patch-a-range-of-serious-security-flaws


--- Mystic BBS v1.12 A47 (Linux/64)
* Origin: tqwNet Technology News (1337:1/100)