CVE-2015-5053 Privilege escalation in n/a

What is CVE-2015-5053?

CVE-2015-5053 is a critical vulnerability in Nvidia Gpu Driver, published on 24 Nov 2015. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

The host memory mapping path feature in the NVIDIA GPU graphics driver R346 before 346.87 and R352 before 352.41 for Linux and R352 before 352.46 for GRID vGPU and vSGA does not properly restrict access to third-party device IO memory, which allows attackers to gain privileges, cause a denial of service (resource consumption), or possibly have unspecified other impact via unknown vectors related to the follow_pfn kernel-mode API call.

Weakness: CWE-284

Which versions are affected by CVE-2015-5053?

It affects 1 product.

Products include Nvidia Gpu Driver.

How do I fix CVE-2015-5053?

Upgrade to a fixed version.

Is CVE-2015-5053 being exploited?

There is no known exploitation of CVE-2015-5053 in the wild and no public exploit code.

Other vulnerabilities in Nvidia Gpu Driver

• CVE-2019-5684 Memory corruption in GPU Display Driver Critical 10.0
• CVE-2013-5986 Other in n/a Critical 10.0
• CVE-2019-5685 Memory corruption in GPU Display Driver Critical 9.8
• CVE-2018-6247 Null dereference in GPU Display Driver High 8.8
• CVE-2018-6248 Memory corruption in GPU Display Driver High 8.8

All Nvidia Gpu Driver vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as DEBIAN-CVE-2015-5053, GHSA-54q6-gvgx-frm8.