{"id":"USN-4404-1","summary":"nvidia-graphics-drivers-390, nvidia-graphics-drivers-440 vulnerabilities","details":"Thomas E. Carroll discovered that the NVIDIA Cuda grpahics driver did not\nproperly perform access control when performing IPC. An attacker could use\nthis to cause a denial of service or possibly execute arbitrary code.\n(CVE-2020-5963)\n\nIt was discovered that the UVM driver in the NVIDIA graphics driver\ncontained a race condition. A local attacker could use this to cause a\ndenial of service. (CVE-2020-5967)\n\nIt was discovered that the NVIDIA virtual GPU guest drivers contained\nan unspecified vulnerability that could potentially lead to privileged\noperation execution. An attacker could use this to cause a denial of\nservice. (CVE-2020-5973)\n","modified":"2026-04-22T10:05:55.068558Z","published":"2020-06-25T17:46:40Z","related":["UBUNTU-CVE-2020-5963","UBUNTU-CVE-2020-5967","UBUNTU-CVE-2020-5973"],"upstream":["CVE-2020-5963","CVE-2020-5967","CVE-2020-5973","UBUNTU-CVE-2020-5963","UBUNTU-CVE-2020-5967","UBUNTU-CVE-2020-5973"],"references":[{"type":"ADVISORY","url":"https://ubuntu.com/security/notices/USN-4404-1"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2020-5963"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2020-5967"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2020-5973"}],"affected":[{"package":{"name":"nvidia-graphics-drivers-390","ecosystem":"Ubuntu:18.04:LTS","purl":"pkg:deb/ubuntu/nvidia-graphics-drivers-390@390.138-0ubuntu0.18.04.1?arch=source&distro=bionic"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"390.138-0ubuntu0.18.04.1"}]}],"versions":["390.25-0ubuntu1","390.25-0ubuntu3","390.25-0ubuntu4","390.42-0ubuntu1","390.48-0ubuntu1","390.48-0ubuntu2","390.48-0ubuntu3","390.77-0ubuntu0.18.04.1","390.77-0ubuntu0.18.04.2","390.116-0ubuntu0.18.04.1","390.116-0ubuntu0.18.04.3","390.132-0ubuntu0.18.04.1"],"ecosystem_specific":{"availability":"No subscription required","binaries":[{"binary_name":"libcuda1-384","binary_version":"390.138-0ubuntu0.18.04.1"},{"binary_name":"libnvidia-cfg1-390","binary_version":"390.138-0ubuntu0.18.04.1"},{"binary_name":"libnvidia-common-390","binary_version":"390.138-0ubuntu0.18.04.1"},{"binary_name":"libnvidia-compute-390","binary_version":"390.138-0ubuntu0.18.04.1"},{"binary_name":"libnvidia-decode-390","binary_version":"390.138-0ubuntu0.18.04.1"},{"binary_name":"libnvidia-encode-390","binary_version":"390.138-0ubuntu0.18.04.1"},{"binary_name":"libnvidia-fbc1-390","binary_version":"390.138-0ubuntu0.18.04.1"},{"binary_name":"libnvidia-gl-390","binary_version":"390.138-0ubuntu0.18.04.1"},{"binary_name":"libnvidia-ifr1-390","binary_version":"390.138-0ubuntu0.18.04.1"},{"binary_name":"nvidia-384","binary_version":"390.138-0ubuntu0.18.04.1"},{"binary_name":"nvidia-compute-utils-390","binary_version":"390.138-0ubuntu0.18.04.1"},{"binary_name":"nvidia-dkms-390","binary_version":"390.138-0ubuntu0.18.04.1"},{"binary_name":"nvidia-driver-390","binary_version":"390.138-0ubuntu0.18.04.1"},{"binary_name":"nvidia-headless-390","binary_version":"390.138-0ubuntu0.18.04.1"},{"binary_name":"nvidia-headless-no-dkms-390","binary_version":"390.138-0ubuntu0.18.04.1"},{"binary_name":"nvidia-kernel-common-390","binary_version":"390.138-0ubuntu0.18.04.1"},{"binary_name":"nvidia-kernel-source-390","binary_version":"390.138-0ubuntu0.18.04.1"},{"binary_name":"nvidia-libopencl1-384","binary_version":"390.138-0ubuntu0.18.04.1"},{"binary_name":"nvidia-opencl-icd-384","binary_version":"390.138-0ubuntu0.18.04.1"},{"binary_name":"nvidia-utils-390","binary_version":"390.138-0ubuntu0.18.04.1"},{"binary_name":"xserver-xorg-video-nvidia-390","binary_version":"390.138-0ubuntu0.18.04.1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-4404-1.json","cves_map":{"cves":[{"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"type":"Ubuntu","score":"medium"}],"id":"CVE-2020-5963"},{"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H"},{"type":"Ubuntu","score":"medium"}],"id":"CVE-2020-5967"},{"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H"},{"type":"Ubuntu","score":"medium"}],"id":"CVE-2020-5973"}],"ecosystem":"Ubuntu:18.04:LTS"}}},{"package":{"name":"nvidia-graphics-drivers-440","ecosystem":"Ubuntu:18.04:LTS","purl":"pkg:deb/ubuntu/nvidia-graphics-drivers-440@440.100-0ubuntu0.18.04.1?arch=source&distro=bionic"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"440.100-0ubuntu0.18.04.1"}]}],"versions":["440.59-0ubuntu0.18.04.1"],"ecosystem_specific":{"availability":"No subscription required","binaries":[{"binary_name":"libnvidia-cfg1-430","binary_version":"440.100-0ubuntu0.18.04.1"},{"binary_name":"libnvidia-cfg1-440","binary_version":"440.100-0ubuntu0.18.04.1"},{"binary_name":"libnvidia-common-430","binary_version":"440.100-0ubuntu0.18.04.1"},{"binary_name":"libnvidia-common-440","binary_version":"440.100-0ubuntu0.18.04.1"},{"binary_name":"libnvidia-compute-430","binary_version":"440.100-0ubuntu0.18.04.1"},{"binary_name":"libnvidia-compute-440","binary_version":"440.100-0ubuntu0.18.04.1"},{"binary_name":"libnvidia-decode-430","binary_version":"440.100-0ubuntu0.18.04.1"},{"binary_name":"libnvidia-decode-440","binary_version":"440.100-0ubuntu0.18.04.1"},{"binary_name":"libnvidia-encode-430","binary_version":"440.100-0ubuntu0.18.04.1"},{"binary_name":"libnvidia-encode-440","binary_version":"440.100-0ubuntu0.18.04.1"},{"binary_name":"libnvidia-extra-440","binary_version":"440.100-0ubuntu0.18.04.1"},{"binary_name":"libnvidia-fbc1-430","binary_version":"440.100-0ubuntu0.18.04.1"},{"binary_name":"libnvidia-fbc1-440","binary_version":"440.100-0ubuntu0.18.04.1"},{"binary_name":"libnvidia-gl-430","binary_version":"440.100-0ubuntu0.18.04.1"},{"binary_name":"libnvidia-gl-440","binary_version":"440.100-0ubuntu0.18.04.1"},{"binary_name":"libnvidia-ifr1-430","binary_version":"440.100-0ubuntu0.18.04.1"},{"binary_name":"libnvidia-ifr1-440","binary_version":"440.100-0ubuntu0.18.04.1"},{"binary_name":"nvidia-compute-utils-430","binary_version":"440.100-0ubuntu0.18.04.1"},{"binary_name":"nvidia-compute-utils-440","binary_version":"440.100-0ubuntu0.18.04.1"},{"binary_name":"nvidia-dkms-430","binary_version":"440.100-0ubuntu0.18.04.1"},{"binary_name":"nvidia-dkms-440","binary_version":"440.100-0ubuntu0.18.04.1"},{"binary_name":"nvidia-driver-430","binary_version":"440.100-0ubuntu0.18.04.1"},{"binary_name":"nvidia-driver-440","binary_version":"440.100-0ubuntu0.18.04.1"},{"binary_name":"nvidia-headless-430","binary_version":"440.100-0ubuntu0.18.04.1"},{"binary_name":"nvidia-headless-440","binary_version":"440.100-0ubuntu0.18.04.1"},{"binary_name":"nvidia-headless-no-dkms-430","binary_version":"440.100-0ubuntu0.18.04.1"},{"binary_name":"nvidia-headless-no-dkms-440","binary_version":"440.100-0ubuntu0.18.04.1"},{"binary_name":"nvidia-kernel-common-430","binary_version":"440.100-0ubuntu0.18.04.1"},{"binary_name":"nvidia-kernel-common-440","binary_version":"440.100-0ubuntu0.18.04.1"},{"binary_name":"nvidia-kernel-source-430","binary_version":"440.100-0ubuntu0.18.04.1"},{"binary_name":"nvidia-kernel-source-440","binary_version":"440.100-0ubuntu0.18.04.1"},{"binary_name":"nvidia-utils-430","binary_version":"440.100-0ubuntu0.18.04.1"},{"binary_name":"nvidia-utils-440","binary_version":"440.100-0ubuntu0.18.04.1"},{"binary_name":"xserver-xorg-video-nvidia-430","binary_version":"440.100-0ubuntu0.18.04.1"},{"binary_name":"xserver-xorg-video-nvidia-440","binary_version":"440.100-0ubuntu0.18.04.1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-4404-1.json","cves_map":{"cves":[{"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"type":"Ubuntu","score":"medium"}],"id":"CVE-2020-5963"},{"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H"},{"type":"Ubuntu","score":"medium"}],"id":"CVE-2020-5967"},{"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H"},{"type":"Ubuntu","score":"medium"}],"id":"CVE-2020-5973"}],"ecosystem":"Ubuntu:18.04:LTS"}}},{"package":{"name":"nvidia-graphics-drivers-390","ecosystem":"Ubuntu:20.04:LTS","purl":"pkg:deb/ubuntu/nvidia-graphics-drivers-390@390.138-0ubuntu0.20.04.1?arch=source&distro=focal"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"390.138-0ubuntu0.20.04.1"}]}],"versions":["390.129-0ubuntu2","390.132-0ubuntu1","390.132-0ubuntu2"],"ecosystem_specific":{"availability":"No subscription required","binaries":[{"binary_name":"libcuda1-384","binary_version":"390.138-0ubuntu0.20.04.1"},{"binary_name":"libnvidia-cfg1-390","binary_version":"390.138-0ubuntu0.20.04.1"},{"binary_name":"libnvidia-common-390","binary_version":"390.138-0ubuntu0.20.04.1"},{"binary_name":"libnvidia-compute-390","binary_version":"390.138-0ubuntu0.20.04.1"},{"binary_name":"libnvidia-decode-390","binary_version":"390.138-0ubuntu0.20.04.1"},{"binary_name":"libnvidia-encode-390","binary_version":"390.138-0ubuntu0.20.04.1"},{"binary_name":"libnvidia-fbc1-390","binary_version":"390.138-0ubuntu0.20.04.1"},{"binary_name":"libnvidia-gl-390","binary_version":"390.138-0ubuntu0.20.04.1"},{"binary_name":"libnvidia-ifr1-390","binary_version":"390.138-0ubuntu0.20.04.1"},{"binary_name":"nvidia-384","binary_version":"390.138-0ubuntu0.20.04.1"},{"binary_name":"nvidia-compute-utils-390","binary_version":"390.138-0ubuntu0.20.04.1"},{"binary_name":"nvidia-dkms-390","binary_version":"390.138-0ubuntu0.20.04.1"},{"binary_name":"nvidia-driver-390","binary_version":"390.138-0ubuntu0.20.04.1"},{"binary_name":"nvidia-headless-390","binary_version":"390.138-0ubuntu0.20.04.1"},{"binary_name":"nvidia-headless-no-dkms-390","binary_version":"390.138-0ubuntu0.20.04.1"},{"binary_name":"nvidia-kernel-common-390","binary_version":"390.138-0ubuntu0.20.04.1"},{"binary_name":"nvidia-kernel-source-390","binary_version":"390.138-0ubuntu0.20.04.1"},{"binary_name":"nvidia-libopencl1-384","binary_version":"390.138-0ubuntu0.20.04.1"},{"binary_name":"nvidia-opencl-icd-384","binary_version":"390.138-0ubuntu0.20.04.1"},{"binary_name":"nvidia-utils-390","binary_version":"390.138-0ubuntu0.20.04.1"},{"binary_name":"xserver-xorg-video-nvidia-390","binary_version":"390.138-0ubuntu0.20.04.1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-4404-1.json","cves_map":{"cves":[{"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"type":"Ubuntu","score":"medium"}],"id":"CVE-2020-5963"},{"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H"},{"type":"Ubuntu","score":"medium"}],"id":"CVE-2020-5967"},{"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H"},{"type":"Ubuntu","score":"medium"}],"id":"CVE-2020-5973"}],"ecosystem":"Ubuntu:20.04:LTS"}}},{"package":{"name":"nvidia-graphics-drivers-440","ecosystem":"Ubuntu:20.04:LTS","purl":"pkg:deb/ubuntu/nvidia-graphics-drivers-440@440.100-0ubuntu0.20.04.1?arch=source&distro=focal"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"440.100-0ubuntu0.20.04.1"}]}],"versions":["440.31-0ubuntu1","440.36-0ubuntu1","440.44-0ubuntu1","440.44-0ubuntu2","440.59-0ubuntu1","440.59-0ubuntu2","440.64-0ubuntu1","440.64-0ubuntu2","440.64-0ubuntu3","440.82-0ubuntu1","440.82+really.440.64-0ubuntu4","440.82+really.440.64-0ubuntu5","440.82+really.440.64-0ubuntu6"],"ecosystem_specific":{"availability":"No subscription required","binaries":[{"binary_name":"libnvidia-cfg1-430","binary_version":"440.100-0ubuntu0.20.04.1"},{"binary_name":"libnvidia-cfg1-440","binary_version":"440.100-0ubuntu0.20.04.1"},{"binary_name":"libnvidia-common-430","binary_version":"440.100-0ubuntu0.20.04.1"},{"binary_name":"libnvidia-common-440","binary_version":"440.100-0ubuntu0.20.04.1"},{"binary_name":"libnvidia-compute-430","binary_version":"440.100-0ubuntu0.20.04.1"},{"binary_name":"libnvidia-compute-440","binary_version":"440.100-0ubuntu0.20.04.1"},{"binary_name":"libnvidia-decode-430","binary_version":"440.100-0ubuntu0.20.04.1"},{"binary_name":"libnvidia-decode-440","binary_version":"440.100-0ubuntu0.20.04.1"},{"binary_name":"libnvidia-encode-430","binary_version":"440.100-0ubuntu0.20.04.1"},{"binary_name":"libnvidia-encode-440","binary_version":"440.100-0ubuntu0.20.04.1"},{"binary_name":"libnvidia-extra-440","binary_version":"440.100-0ubuntu0.20.04.1"},{"binary_name":"libnvidia-fbc1-430","binary_version":"440.100-0ubuntu0.20.04.1"},{"binary_name":"libnvidia-fbc1-440","binary_version":"440.100-0ubuntu0.20.04.1"},{"binary_name":"libnvidia-gl-430","binary_version":"440.100-0ubuntu0.20.04.1"},{"binary_name":"libnvidia-gl-440","binary_version":"440.100-0ubuntu0.20.04.1"},{"binary_name":"libnvidia-ifr1-430","binary_version":"440.100-0ubuntu0.20.04.1"},{"binary_name":"libnvidia-ifr1-440","binary_version":"440.100-0ubuntu0.20.04.1"},{"binary_name":"nvidia-compute-utils-430","binary_version":"440.100-0ubuntu0.20.04.1"},{"binary_name":"nvidia-compute-utils-440","binary_version":"440.100-0ubuntu0.20.04.1"},{"binary_name":"nvidia-dkms-430","binary_version":"440.100-0ubuntu0.20.04.1"},{"binary_name":"nvidia-dkms-440","binary_version":"440.100-0ubuntu0.20.04.1"},{"binary_name":"nvidia-driver-430","binary_version":"440.100-0ubuntu0.20.04.1"},{"binary_name":"nvidia-driver-440","binary_version":"440.100-0ubuntu0.20.04.1"},{"binary_name":"nvidia-headless-430","binary_version":"440.100-0ubuntu0.20.04.1"},{"binary_name":"nvidia-headless-440","binary_version":"440.100-0ubuntu0.20.04.1"},{"binary_name":"nvidia-headless-no-dkms-430","binary_version":"440.100-0ubuntu0.20.04.1"},{"binary_name":"nvidia-headless-no-dkms-440","binary_version":"440.100-0ubuntu0.20.04.1"},{"binary_name":"nvidia-kernel-common-430","binary_version":"440.100-0ubuntu0.20.04.1"},{"binary_name":"nvidia-kernel-common-440","binary_version":"440.100-0ubuntu0.20.04.1"},{"binary_name":"nvidia-kernel-source-430","binary_version":"440.100-0ubuntu0.20.04.1"},{"binary_name":"nvidia-kernel-source-440","binary_version":"440.100-0ubuntu0.20.04.1"},{"binary_name":"nvidia-utils-430","binary_version":"440.100-0ubuntu0.20.04.1"},{"binary_name":"nvidia-utils-440","binary_version":"440.100-0ubuntu0.20.04.1"},{"binary_name":"xserver-xorg-video-nvidia-430","binary_version":"440.100-0ubuntu0.20.04.1"},{"binary_name":"xserver-xorg-video-nvidia-440","binary_version":"440.100-0ubuntu0.20.04.1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-4404-1.json","cves_map":{"cves":[{"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"type":"Ubuntu","score":"medium"}],"id":"CVE-2020-5963"},{"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H"},{"type":"Ubuntu","score":"medium"}],"id":"CVE-2020-5967"},{"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H"},{"type":"Ubuntu","score":"medium"}],"id":"CVE-2020-5973"}],"ecosystem":"Ubuntu:20.04:LTS"}}}],"schema_version":"1.7.5"}