CVE-2024-0093

Published: Jun 13, 2024Modified: Jun 17, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

NVIDIA GPU software for Linux contains a vulnerability where it can expose sensitive information to an actor that is not explicitly authorized to have access to that information. A successful exploit of this vulnerability might lead to information disclosure.

Affected (4)

Products: Nvidia: Virtual Gpu, Cloud Gaming

2 products

Configuration A

3 vulnerable · 2 platform

Vulnerable Software	Affected Versions
Nvidia Virtual Gpu	Before 13.11
Nvidia Virtual Gpu	From 14.0 to 16.6
Nvidia Virtual Gpu	From 17.0 to 17.2

Running on/with	Platform Versions
Canonical Ubuntu Linux	All versions
Citrix Hypervisor	All versions

Configuration B

1 vulnerable · 2 platform

Vulnerable Software	Affected Versions
Nvidia Cloud Gaming	Before 555.52.04

Running on/with	Platform Versions
Redhat Enterprise Linux Kernel Based Virtual Machine	All versions
Vmware Vsphere	All versions

Related CWEs

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (2)

https://nvidia.custhelp.com/app/answers/detail/a_id/5551

Source: psirt@nvidia.com

Vendor Advisory

https://nvidia.custhelp.com/app/answers/detail/a_id/5551

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.