Nvidia GPU owners told to update now to patch a range of serious security flaws

Nvidia has released a new patch for its GPU Display Driver for Windows and Linux to fix a handful of rather serious vulnerabilities.

If exploited, the vulnerabilities mostly lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering, which means they are rather serious. Among them is CVE‑2024‑0126, which has a severity score of 8.2 (high severity).

Another six vulnerabilities are scored 7.8, while the final one is scored 7.1. Of the total eight flaws, five affect the Windows ecosystem. They are all user mode layer exploits, in which threat actors could initiate out-of-bound reads and thus execute code remotely. One exploit was for both Windows and Linux.

Smash and grab

The details about the vulnerabilities and how they can be exploited can be found on Nvidia’s security bulletin, here. There was no word of in-the-wild abuse, so we’re guessing crooks haven’t abused these bugs just yet.

However, with Nvidia’s popularity and prevalence, it is now only a matter of time before miscreants start looking for vulnerable endpoints to exploit.

GPUs are a popular target among cybercriminals, and not just those built by Nvidia. For example, in September 2023, security researchers warned of a flaw found in GPUs from all major manufacturers, which allowed hackers to read sensitive data displayed in browsers. Furthermore, in June 2024, ARM said it had found vulnerabilities in Bifrost and Valhall GPU kernel drivers being exploited in the wild.

At the time, the vulnerability was two years old, yet many users did not patch it on time.

Running regular updates to both software and hardware is one of the best ways to prevent cyberattacks. Users are advised to download and install the software update through the Driver Downloads page or, for the vGPU software and Cloud Gaming updates, through the Licensing Portal.

More from TechRadar Pro



from TechRadar - All the latest technology news https://ift.tt/fHUGcdx

Comments

Post a Comment

Popular posts from this blog

ChatGPT use declines as users complain about ‘dumber’ answers, and the reason might be AI’s biggest threat for the future

Image
  Is ChatGPT old news already? It seems impossible, with the explosion of AI popularity seeping into every aspect of our lives - whether it’s digital masterpieces forged with the best AI art generators or helping us with our online shopping . But despite being the leader in the AI arms race - and powering Microsoft’s Bing AI - it looks like ChatGPT might be losing momentum. According to SimilarWeb , traffic to OpenAI’s ChatGPT site dropped by almost 10% compared to last month, while metrics from Sensor Tower also demonstrated that downloads of the iOS app are in decline too. As reported by Insider , paying users of the more powerful GPT-4 model (access to which is included in ChatGPT Plus ) have been complaining on social media and OpenAI’s own forums about a dip in output quality from the chatbot. A common consensus was that GPT-4 was able to generate outputs faster, but at a lower level of quality. Peter Yang , a product lead for Roblox, took to Twitter to decry the bot’s re
Read more

Amazon's super cheap refurbished gadgets get a further 20% discount this Black Friday

Image
Buying refurbished tech is a way to get the best tech for less all year round - but Amazon has made select items even cheaper thanks to its Black Friday deals . Right now you can get an additional 20% off used items from Amazon Warehouse - and that's on top of the discount these electronics already come with compared to their brand-new counterparts. Refurbished tech obviously comes with a caveat - it has some wear and tear already. However, Amazon guarantees that these devices are fit for purpose and offers a one-year warranty. Just be sure to check what condition the item is in before you buy, as 'Like New' devices will come in a much better state than those that only achieve an 'Acceptable' grade. ( Not in the UK? Scroll down for deals in your region. ) Today's best refurbished tech Black Friday deals PS5 DualSense Controller:  £41.23 £32.94 at Amazon Save £8 - If you want a second controller to play some multiplayer games on your PS5 then y
Read more

Who needs OLED when this budget 4K TV is such a good Black Friday deal?

Image
As you skim through this year’s best Black Friday TV deals it's easy to have your eyes drawn to £500+ savings that can be had on the best (and most expensive) televisions available today. Compared to these massive deals, a measly £80 saving against a budget LCD doesn’t seem anywhere near as impressive – though that doesn't mean you should dismiss it right away. We've been testing out Toshiba's UK31 smart TV – one of the best the brand has released in 2021 – and while it may not be as visually stunning as the latest LG OLED, it offers a great 4K picture quality with some impressive TRU picture software for enhancing whatever you’re watching. If you’re still stuck with an older HD TV and finally want to upgrade to 4K or are after a second TV to put in your bedroom or kid’s playroom then this 2021 TV is a fantastic choice – especially with this year’s Black Friday deals that have knocked the price down even further. ( Not in the UK? Scroll down for deals in your re
Read more