CVE-2012-0953 MEDIUM

CVE-2012-0953: Kernel heap contents leak race in ioctl handler

Vendor Nvidia

Product graphics drivers

Weakness CWE-362

Published May 8, 2020

Last update September 17, 2024

View on NVD All CVEs

CVSS base score

5.0/10

Attack vector Local

Attack complexity High

Privileges required High

User interaction None

Confidentiality Low

Integrity Low

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L

What the vulnerability does

01Description

A race condition was discovered in the Linux drivers for Nvidia graphics which allowed an attacker to exfiltrate kernel memory to userspace. This issue was fixed in version 295.53.

Key dates

02Disclosure timeline

May 8, 2020 CVE published

September 17, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2012-0953 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/362.html

Related vulnerabilities

CVE-2012-0953: Kernel heap contents leak race in ioctl handler

01Description

02Disclosure timeline

03References

04Related CVE