CVE-2024-53869

NameCVE-2024-53869
DescriptionNVIDIA Unified Memory driver for Linux contains a vulnerability where an attacker could leak uninitialized memory. A successful exploit of this vulnerability might lead to information disclosure.
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
Debian Bugs1093908, 1093916, 1093917

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
nvidia-graphics-drivers (PTS)bullseye/non-free470.256.02-2vulnerable
bookworm/non-free-firmware535.247.01-1~deb12u1fixed
trixie/non-free-firmware535.247.01-1fixed
sid/non-free-firmware550.144.03-1fixed
nvidia-graphics-drivers-tesla-535 (PTS)bookworm/non-free-firmware535.216.03-3~deb12u1vulnerable
trixie/non-free-firmware535.216.03-3vulnerable
sid/non-free-firmware535.247.01-1fixed
nvidia-open-gpu-kernel-modules (PTS)bookworm/contrib535.247.01-1~deb12u1fixed
trixie/contrib535.247.01-1fixed
sid/contrib550.144.03-1fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
nvidia-graphics-driverssourcebookworm535.247.01-1~deb12u1
nvidia-graphics-driverssource(unstable)535.230.02-11093908
nvidia-graphics-drivers-tesla-535source(unstable)535.247.01-11093917
nvidia-open-gpu-kernel-modulessourcebookworm535.247.01-1~deb12u1
nvidia-open-gpu-kernel-modulessource(unstable)535.230.02-11093916

Notes

[bookworm] - nvidia-graphics-drivers-tesla-535 <no-dsa> (Non-free not supported)
https://nvidia.custhelp.com/app/answers/detail/a_id/5614

Search for package or bug name: Reporting problems