Nvidia cuda Driver For Linux local information leakage Vulnerability

Nvidia cuda Driver For Linux local information leakage Vulnerability

Release date:
Updated on:

Affected Systems:
Nvidia cuda Driver
Description:
--------------------------------------------------------------------------------
Bugtraq id: 45717

NVidia is the world's leading manufacturer of graphics processing chips and graphics cards.

Nvidia cuda Driver for linux has a vulnerability in implementation. Local attackers can exploit this vulnerability to obtain sensitive information, resulting in local information leakage.

This vulnerability occurs because the driver maps the fixed memory to the user space, but does not initialize it to zero.

<* Source: Alex Granovsky

Link: http://marc.info /? L = bugtraq & m = 129442620007481 & w = 2

*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

NVIDIA
------
Currently, the vendor does not provide patches or upgrade programs. We recommend that users who use the software follow the vendor's homepage to obtain the latest version:

Http://www.nvidia.com/