Skip to main content

Incorrect Default Permissions

CVE-2021-1056

Low
3.6/10

Summary

NVIDIA GPU Display Driver for Linux, all versions, contains a vulnerability in the kernel mode layer (nvidia.ko) in which it does not completely honor operating system file system permissions to provide GPU device-level isolation, which may lead to denial of service or information disclosure.

  • LOW
  • LOCAL
  • NONE
  • NONE
  • PARTIAL
  • PARTIAL

CWE-276 - Incorrect Default Permissions

During installation, installed file permissions are set to allow anyone to modify those files.

References

Advisory Timeline

  • Published