CVE-2015-5950 Privilege escalation in n/a
Local attackers can gain privileges by exploiting a kernel memory write vulnerability in NVIDIA display drivers via crafted ioctl calls.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2015-5950?
CVE-2015-5950 is a medium-severity vulnerability in Nvidia Gpu Driver, published on 29 Sep 2015. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
The NVIDIA display driver R352 before 353.82 and R340 before 341.81 on Windows; R304 before 304.128, R340 before 340.93, and R352 before 352.41 on Linux; and R352 before 352.46 on GRID vGPU and vSGA allows local users to write to an arbitrary kernel memory location and consequently gain privileges via a crafted ioctl call.
Weakness: CWE-119
Which versions are affected by CVE-2015-5950?
It affects 2 products.
Products include Nvidia Display Driver, Nvidia Gpu Driver.
How do I fix CVE-2015-5950?
Upgrade to a fixed version.
Is CVE-2015-5950 being exploited?
There is no known exploitation of CVE-2015-5950 in the wild and no public exploit code.
Other vulnerabilities in Nvidia Gpu Driver
Sources
Also known as DEBIAN-CVE-2015-5950, GHSA-gc3p-rqcf-jm9p, MGASA-2015-0407, UBUNTU-CVE-2015-5950, USN-2747-1.