CVE-2024-0086 - CVE House
Back to Database
Status published Medium CVE-2024-0086

CVE

Vulnerability Description

NVIDIA vGPU software for Linux contains a vulnerability where the software can dereference a NULL pointer. A successful exploit of this vulnerability might lead to denial of service and undefined behavior in the vGPU plugin.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-0086

Credits & Attribution

No credits recorded in the NVD database.

References

More from nvidia

View All →
CVE-2024-0103
CVE
Medium 5.4
CVE-2024-0100
CVE
Medium 6.5
CVE-2024-0099
CVE
High 7.8
CVE-2024-0098
CVE
Medium 5.5
CVE-2024-0097
CVE
High 7.5

Affected Vendor

Affected Software

vGPU software and Cloud Gaming
Vulnerable Versions:
All versions up to and including 17.1, 16.5, 13.10, and the April 2024 release

Timeline

Official Publish: June 13th, 2024
Last Modified: August 1st, 2024
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weaknesses (CWE)

CWE-476

MITRE ATT&CK TTPs

T1499 Endpoint Denial of Service
Impact
T1499.004 Application or System Exploitation
Impact
T1489 Service Stop
Impact
T1203 Exploitation for Client Execution
Execution
T1190 Exploit Public-Facing Application
Initial Access