{"id":"UBUNTU-CVE-2018-6260","details":"NVIDIA graphics driver contains a vulnerability that may allow access to application data processed on the GPU through a side channel exposed by the GPU performance counters. Local user access is required. This is not a network or remote attack vector.","modified":"2026-04-22T12:01:38.578937Z","published":"2018-11-13T00:00:00Z","related":["USN-3904-1"],"upstream":["CVE-2018-6260"],"references":[{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2018-6260"},{"type":"REPORT","url":"https://nvidia.custhelp.com/app/answers/detail/a_id/4738"},{"type":"REPORT","url":"https://nvidia.custhelp.com/app/answers/detail/a_id/4772/"},{"type":"ADVISORY","url":"https://ubuntu.com/security/notices/USN-3904-1"},{"type":"REPORT","url":"https://www.cve.org/CVERecord?id=CVE-2018-6260"}],"affected":[{"package":{"name":"nvidia-graphics-drivers-304","ecosystem":"Ubuntu:16.04:LTS","purl":"pkg:deb/ubuntu/nvidia-graphics-drivers-304@304.135-0ubuntu0.16.04.3?arch=source&distro=xenial"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["304.128-0ubuntu1","304.131-0ubuntu2","304.131-0ubuntu3","304.132-0ubuntu0.16.04.2","304.134-0ubuntu0.16.04.1","304.135-0ubuntu0.16.04.1","304.135-0ubuntu0.16.04.2","304.135-0ubuntu0.16.04.3"],"ecosystem_specific":{"binaries":[{"binary_version":"304.135-0ubuntu0.16.04.3","binary_name":"libcuda1-304"},{"binary_name":"libcuda1-304-updates","binary_version":"304.135-0ubuntu0.16.04.3"},{"binary_name":"nvidia-304","binary_version":"304.135-0ubuntu0.16.04.3"},{"binary_version":"304.135-0ubuntu0.16.04.3","binary_name":"nvidia-304-updates"},{"binary_version":"304.135-0ubuntu0.16.04.3","binary_name":"nvidia-current"},{"binary_version":"304.135-0ubuntu0.16.04.3","binary_name":"nvidia-libopencl1-304"},{"binary_name":"nvidia-libopencl1-304-updates","binary_version":"304.135-0ubuntu0.16.04.3"},{"binary_name":"nvidia-opencl-icd-304","binary_version":"304.135-0ubuntu0.16.04.3"},{"binary_name":"nvidia-opencl-icd-304-updates","binary_version":"304.135-0ubuntu0.16.04.3"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2018/UBUNTU-CVE-2018-6260.json"}},{"package":{"name":"nvidia-graphics-drivers-340","ecosystem":"Ubuntu:16.04:LTS","purl":"pkg:deb/ubuntu/nvidia-graphics-drivers-340@340.107-0ubuntu0.16.04.2?arch=source&distro=xenial"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["340.93-0ubuntu1","340.93-0ubuntu2","340.96-0ubuntu1","340.96-0ubuntu2","340.96-0ubuntu3","340.98-0ubuntu0.16.04.1","340.101-0ubuntu0.16.04.1","340.102-0ubuntu0.16.04.1","340.102-0ubuntu0.16.04.2","340.104-0ubuntu0.16.04.1","340.107-0ubuntu0.16.04.2"],"ecosystem_specific":{"binaries":[{"binary_name":"libcuda1-331","binary_version":"340.107-0ubuntu0.16.04.2"},{"binary_name":"libcuda1-331-updates","binary_version":"340.107-0ubuntu0.16.04.2"},{"binary_name":"libcuda1-340","binary_version":"340.107-0ubuntu0.16.04.2"},{"binary_name":"libcuda1-340-updates","binary_version":"340.107-0ubuntu0.16.04.2"},{"binary_name":"nvidia-331","binary_version":"340.107-0ubuntu0.16.04.2"},{"binary_name":"nvidia-331-updates","binary_version":"340.107-0ubuntu0.16.04.2"},{"binary_version":"340.107-0ubuntu0.16.04.2","binary_name":"nvidia-331-updates-uvm"},{"binary_name":"nvidia-331-uvm","binary_version":"340.107-0ubuntu0.16.04.2"},{"binary_name":"nvidia-340","binary_version":"340.107-0ubuntu0.16.04.2"},{"binary_name":"nvidia-340-updates","binary_version":"340.107-0ubuntu0.16.04.2"},{"binary_name":"nvidia-340-uvm","binary_version":"340.107-0ubuntu0.16.04.2"},{"binary_name":"nvidia-libopencl1-331","binary_version":"340.107-0ubuntu0.16.04.2"},{"binary_name":"nvidia-libopencl1-331-updates","binary_version":"340.107-0ubuntu0.16.04.2"},{"binary_name":"nvidia-libopencl1-340","binary_version":"340.107-0ubuntu0.16.04.2"},{"binary_name":"nvidia-libopencl1-340-updates","binary_version":"340.107-0ubuntu0.16.04.2"},{"binary_name":"nvidia-opencl-icd-331","binary_version":"340.107-0ubuntu0.16.04.2"},{"binary_name":"nvidia-opencl-icd-331-updates","binary_version":"340.107-0ubuntu0.16.04.2"},{"binary_name":"nvidia-opencl-icd-340","binary_version":"340.107-0ubuntu0.16.04.2"},{"binary_name":"nvidia-opencl-icd-340-updates","binary_version":"340.107-0ubuntu0.16.04.2"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2018/UBUNTU-CVE-2018-6260.json"}},{"package":{"name":"nvidia-graphics-drivers-384","ecosystem":"Ubuntu:16.04:LTS","purl":"pkg:deb/ubuntu/nvidia-graphics-drivers-384@384.130-0ubuntu0.16.04.2?arch=source&distro=xenial"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["384.90-0ubuntu0.16.04.1","384.90-0ubuntu0.16.04.2","384.111-0ubuntu0.16.04.1","384.130-0ubuntu0.16.04.1","384.130-0ubuntu0.16.04.2"],"ecosystem_specific":{"binaries":[{"binary_name":"libcuda1-375","binary_version":"384.130-0ubuntu0.16.04.2"},{"binary_name":"libcuda1-384","binary_version":"384.130-0ubuntu0.16.04.2"},{"binary_name":"nvidia-375","binary_version":"384.130-0ubuntu0.16.04.2"},{"binary_name":"nvidia-384","binary_version":"384.130-0ubuntu0.16.04.2"},{"binary_name":"nvidia-libopencl1-375","binary_version":"384.130-0ubuntu0.16.04.2"},{"binary_version":"384.130-0ubuntu0.16.04.2","binary_name":"nvidia-libopencl1-384"},{"binary_name":"nvidia-opencl-icd-375","binary_version":"384.130-0ubuntu0.16.04.2"},{"binary_name":"nvidia-opencl-icd-384","binary_version":"384.130-0ubuntu0.16.04.2"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2018/UBUNTU-CVE-2018-6260.json"}},{"package":{"name":"nvidia-graphics-drivers-390","ecosystem":"Ubuntu:18.04:LTS","purl":"pkg:deb/ubuntu/nvidia-graphics-drivers-390@390.116-0ubuntu0.18.04.1?arch=source&distro=bionic"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"390.116-0ubuntu0.18.04.1"}]}],"versions":["390.25-0ubuntu1","390.25-0ubuntu3","390.25-0ubuntu4","390.42-0ubuntu1","390.48-0ubuntu1","390.48-0ubuntu2","390.48-0ubuntu3","390.77-0ubuntu0.18.04.1","390.77-0ubuntu0.18.04.2"],"ecosystem_specific":{"availability":"No subscription required","binaries":[{"binary_name":"libcuda1-384","binary_version":"390.116-0ubuntu0.18.04.1"},{"binary_name":"libnvidia-cfg1-390","binary_version":"390.116-0ubuntu0.18.04.1"},{"binary_name":"libnvidia-common-390","binary_version":"390.116-0ubuntu0.18.04.1"},{"binary_name":"libnvidia-compute-390","binary_version":"390.116-0ubuntu0.18.04.1"},{"binary_name":"libnvidia-decode-390","binary_version":"390.116-0ubuntu0.18.04.1"},{"binary_name":"libnvidia-encode-390","binary_version":"390.116-0ubuntu0.18.04.1"},{"binary_name":"libnvidia-fbc1-390","binary_version":"390.116-0ubuntu0.18.04.1"},{"binary_name":"libnvidia-gl-390","binary_version":"390.116-0ubuntu0.18.04.1"},{"binary_name":"libnvidia-ifr1-390","binary_version":"390.116-0ubuntu0.18.04.1"},{"binary_name":"nvidia-384","binary_version":"390.116-0ubuntu0.18.04.1"},{"binary_name":"nvidia-compute-utils-390","binary_version":"390.116-0ubuntu0.18.04.1"},{"binary_name":"nvidia-dkms-390","binary_version":"390.116-0ubuntu0.18.04.1"},{"binary_name":"nvidia-driver-390","binary_version":"390.116-0ubuntu0.18.04.1"},{"binary_name":"nvidia-headless-390","binary_version":"390.116-0ubuntu0.18.04.1"},{"binary_name":"nvidia-headless-no-dkms-390","binary_version":"390.116-0ubuntu0.18.04.1"},{"binary_name":"nvidia-kernel-common-390","binary_version":"390.116-0ubuntu0.18.04.1"},{"binary_name":"nvidia-kernel-source-390","binary_version":"390.116-0ubuntu0.18.04.1"},{"binary_name":"nvidia-libopencl1-384","binary_version":"390.116-0ubuntu0.18.04.1"},{"binary_name":"nvidia-opencl-icd-384","binary_version":"390.116-0ubuntu0.18.04.1"},{"binary_name":"nvidia-utils-390","binary_version":"390.116-0ubuntu0.18.04.1"},{"binary_name":"xserver-xorg-video-nvidia-390","binary_version":"390.116-0ubuntu0.18.04.1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2018/UBUNTU-CVE-2018-6260.json"}},{"package":{"name":"nvidia-graphics-drivers-340","ecosystem":"Ubuntu:18.04:LTS","purl":"pkg:deb/ubuntu/nvidia-graphics-drivers-340@340.108-0ubuntu0.18.04.1?arch=source&distro=bionic"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["340.104-0ubuntu2","340.104-0ubuntu3","340.106-0ubuntu1","340.106-0ubuntu2","340.106-0ubuntu3","340.107-0ubuntu0.18.04.1","340.107-0ubuntu0.18.04.2","340.107-0ubuntu0.18.04.3","340.107-0ubuntu0.18.04.4","340.108-0ubuntu0.18.04.1"],"ecosystem_specific":{"binaries":[{"binary_name":"libcuda1-331","binary_version":"340.108-0ubuntu0.18.04.1"},{"binary_version":"340.108-0ubuntu0.18.04.1","binary_name":"libcuda1-331-updates"},{"binary_name":"libcuda1-340","binary_version":"340.108-0ubuntu0.18.04.1"},{"binary_name":"libcuda1-340-updates","binary_version":"340.108-0ubuntu0.18.04.1"},{"binary_name":"nvidia-331","binary_version":"340.108-0ubuntu0.18.04.1"},{"binary_name":"nvidia-331-updates","binary_version":"340.108-0ubuntu0.18.04.1"},{"binary_name":"nvidia-331-updates-uvm","binary_version":"340.108-0ubuntu0.18.04.1"},{"binary_name":"nvidia-331-uvm","binary_version":"340.108-0ubuntu0.18.04.1"},{"binary_name":"nvidia-340","binary_version":"340.108-0ubuntu0.18.04.1"},{"binary_name":"nvidia-340-updates","binary_version":"340.108-0ubuntu0.18.04.1"},{"binary_name":"nvidia-340-uvm","binary_version":"340.108-0ubuntu0.18.04.1"},{"binary_name":"nvidia-libopencl1-331","binary_version":"340.108-0ubuntu0.18.04.1"},{"binary_name":"nvidia-libopencl1-331-updates","binary_version":"340.108-0ubuntu0.18.04.1"},{"binary_name":"nvidia-libopencl1-340","binary_version":"340.108-0ubuntu0.18.04.1"},{"binary_name":"nvidia-libopencl1-340-updates","binary_version":"340.108-0ubuntu0.18.04.1"},{"binary_name":"nvidia-opencl-icd-331","binary_version":"340.108-0ubuntu0.18.04.1"},{"binary_version":"340.108-0ubuntu0.18.04.1","binary_name":"nvidia-opencl-icd-331-updates"},{"binary_name":"nvidia-opencl-icd-340","binary_version":"340.108-0ubuntu0.18.04.1"},{"binary_name":"nvidia-opencl-icd-340-updates","binary_version":"340.108-0ubuntu0.18.04.1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2018/UBUNTU-CVE-2018-6260.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"type":"Ubuntu","score":"medium"}]}