NVIDIA tells users to update GPU drivers after security disclosure

Latest drivers already have the fix

NVIDIA has published a new security bulletin for its GPU Display Drivers.

The company says it has released software security updates to address vulnerabilities disclosed in the bulletin. Users are advised to download and install the updated driver from NVIDIA’s driver download page.

The bulletin covers multiple NVIDIA GPU Display Driver vulnerabilities. For Windows GeForce users, NVIDIA lists issues in the kernel-mode driver and driver resource handling, including improper GPU resource access, a time-of-check/time-of-use issue and a driver-lock leak. Successful exploitation could allow denial of service, privilege escalation, information disclosure, data tampering or code execution, depending on the CVE. NVIDIA rates the highest Windows/Linux driver issues as “High,” with CVSS scores up to 7.8, while the fixed GeForce Windows R595 driver is 596.36 or newer .

Source: NVIDIA

For GeForce users on Windows, NVIDIA lists version 596.36 as the updated R595 driver with the security fixes. The latest public GeForce Game Ready driver is already newer than that, with version 596.49 released on May 12.

This means gamers using the newest GeForce driver already have the required fix. Users on older driver branches should still check NVIDIA’s advisory for the correct fixed version.

The bulletin covers Windows and Linux drivers. NVIDIA also lists updates for RTX, Quadro, NVS, Tesla, vGPU software and Cloud Gaming software.

Source: NVIDIA

Source: NVIDIA