Urgent security warning: NVIDIA urges GeForce users to update drivers – Eight critical vulnerabilities discovered5. November 2024 06:00
Samir Bashir
 
(Excerpt)
 

Details of the security vulnerabilities

The identified vulnerabilities affect both the NVIDIA GPU Display Driver and the NVIDIA VGPU software. These driver components control the display and management of graphical content on Windows and Linux systems. The vulnerabilities may allow an attacker with elevated privileges to execute malicious code or gain access to sensitive data. Possible attack scenarios include code execution, denial of service, escalation of privileges and information theft. The risk is rated between 7.1 and 8.2 on the CVSS scale, underlining the severity of the threat.

Affected driver versions and recommended updates

(formatting changed from article & bold added for clarity)


To minimize the risk, NVIDIA has provided updated driver versions that close the vulnerabilities. The recommended versions vary depending on the operating system and GPU model.


- Windows users using GeForce, RTX, Quadro or NVS GPUs should update to versions 566.03, 553.24 or 538.95.


- Versions 553.24 and 538.95 are intended for NVIDIA Tesla GPUs.


- Linux users should install versions 565.57.01, 550.127.05 or 535.216.01, depending on the GPU model, to ensure that the gaps are closed.
 

I don’t understand one thing here, if the attacker already has elevated privileges on your computer isn’t it a little bit too late to change the drivers?