What is CVE-2015-5053?

CVE-2015-5053 is a vulnerability in NVIDIA GPU Driver, classified under Improper Access Control. Published 2015-11-24.

Is CVE-2015-5053 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in NVIDIA GPU Driver

CVE-2015-5053

The host memory mapping path feature in the NVIDIA GPU graphics driver R346 before 346.87 and R352 before 352.41 for Linux and R352 before 352.46 for GRID vGPU and vSGA does not properly restrict access to third-party device IO memory, which allows attackers to gain privileges, cause a denial of service (resource consumption), or possibly have unspecified other impact via unknown vectors related to the follow_pfn kernel-mode API call.

EPSS: 0.017 (75.5th percentile) — read the EPSS interpretation.

Affected products

Nvidia Gpu_driver — versions 346.16, 346.22, 346.35
N/a — versions n/a

Weakness classification (CWE)

CWE-284 — Improper Access Control

Public proof-of-concept exploits

gpudirect/libgdsync

References

cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2015-5053?: CVE-2015-5053 is a vulnerability in NVIDIA GPU Driver, classified under Improper Access Control. Published 2015-11-24.
Is CVE-2015-5053 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.