CVE-2017-6259

Name	CVE-2017-6259
Description	NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer handler where an incorrect detection and recovery from an invalid state produced by specific user actions may lead to denial of service.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
Debian Bugs	869783

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
nvidia-graphics-drivers (PTS)	bullseye/non-free	470.256.02-2	fixed
	bookworm/non-free-firmware	535.183.01-1~deb12u1	fixed
	trixie/non-free-firmware, sid/non-free-firmware	535.183.06-1	fixed
nvidia-graphics-drivers-legacy-340xx (PTS)	sid/non-free	340.108-22	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Urgency	Debian Bugs
nvidia-graphics-drivers	source	wheezy	(unfixed)	end-of-life
nvidia-graphics-drivers	source	stretch	375.82-1~deb9u1
nvidia-graphics-drivers	source	(unstable)	375.82-1		869783
nvidia-graphics-drivers-legacy-304xx	source	(unstable)	(not affected)
nvidia-graphics-drivers-legacy-340xx	source	(unstable)	(not affected)

Notes

[jessie] - nvidia-graphics-drivers <no-dsa> (Non-free not supported)
[wheezy] - nvidia-graphics-drivers <end-of-life> (Non-free not supported)
- nvidia-graphics-drivers-legacy-340xx <not-affected> (Limited to E384 and E375)
- nvidia-graphics-drivers-legacy-304xx <not-affected> (Limited to E384 and E375)