CVE-2015-1170
HighSummary
The NVIDIA Display Driver R304 before 309.08, R340 before 341.44, R343 before 345.20, and R346 before 347.52 does not properly validate local client impersonation levels when performing a 'kernel administrator check,' which allows local users to gain administrator privileges via unspecified API calls.
Risk Assessment
This vulnerability poses a risk that local users may gain unauthorized administrator privileges, potentially leading to serious security breaches in the system.
Recommendation
It is recommended to update the NVIDIA display driver to the latest version to mitigate this vulnerability and minimize the risk of unauthorized access.
Other vulnerabilities in NVIDIA Display Driver
See all- CVE-2026-24199Medium
The NVIDIA Display Driver for Linux contains a vulnerability in a kernel module, where a user could cause a race condition by reordering compiler or processor memory instructions. A successful exploit might lead to denial of service.
- CVE-2026-24197Medium
NVIDIA Display Driver for Linux contains a vulnerability in Multi-Instance GPU (MIG) partition management, where insecure default initialization of memory subsystem routing resources could lead to data corruption or a hang during partition reconfiguration, resulting in denial of service.
- CVE-2026-24196High
NVIDIA Display Driver for Linux has an out-of-bounds read vulnerability. Successful exploitation may lead to denial of service and information disclosure.
- CVE-2026-24195High
NVIDIA Display Driver for Linux has a vulnerability in UVM, where a user can cause improper input validation. Successful exploitation might lead to denial of service.
- CVE-2026-24194High
The NVIDIA Display Driver for Linux has a vulnerability in a kernel mode layer handler, where a user could cause improper permission handling. Successful exploitation might lead to denial of service, escalation of privileges, information disclosure, data tampering, and code execution.
- CVE-2026-24193High
NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure, data tampering, and code execution.
- CVE-2026-24192High
The NVIDIA Display Driver for Linux contains a vulnerability where an incorrect conversion between numeric types leads to a heap buffer overflow. Successful exploitation could lead to denial of service, privilege escalation, information disclosure, data tampering, and code execution.
- CVE-2026-24191High
The NVIDIA Display Driver for Windows has a time-of-check time-of-use vulnerability. Successful exploitation can lead to denial of service, privilege escalation, information disclosure, data tampering, and code execution.
- CVE-2026-24190High
NVIDIA Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a user could cause improper access to GPU resources. A successful exploit might lead to denial of service, escalation of privileges, information disclosure, data tampering, and code execution.
- CVE-2026-24187High
The NVIDIA Display Driver for Linux contains a use-after-free vulnerability. Successful exploitation could lead to denial of service, privilege escalation, information disclosure, data tampering, and code execution.
Original NVD description (English source)
The NVIDIA Display Driver R304 before 309.08, R340 before 341.44, R343 before 345.20, and R346 before 347.52 does not properly validate local client impersonation levels when performing a "kernel administrator check," which allows local users to gain administrator privileges via unspecified API calls.