CVE-2018-3979

MEDIUM

Ubuntu Linux Nouveau Display Driver - Remote Denial-of-Service via GPU Shader Execution

Title source: llm
STIX 2.1

Description

A remote denial-of-service vulnerability exists in the way the Nouveau Display Driver (the default Ubuntu Nvidia display driver) handles GPU shader execution. A specially crafted pixel shader can cause remote denial-of-service issues. An attacker can provide a specially crafted website to trigger this vulnerability. This vulnerability can be triggered remotely after the user visits a malformed website. No further user interaction is required. Vulnerable versions include Ubuntu 18.04 LTS (linux 4.15.0-29-generic x86_64), Nouveau Display Driver NV117 (vermagic: 4.15.0-29-generic SMP mod_unload).

References (1)

Core 1
Core References
Exploit, Third Party Advisory x_refsource_confirm
https://talosintelligence.com/vulnerability_reports/TALOS-2018-0647

Scores

CVSS v3 6.5
EPSS 0.0053
EPSS Percentile 67.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Details

CWE
CWE-400
Status published
Products (17)
canonical/ubuntu_linux 18.04
nvidia/geforce_gtx_745_firmware
nvidia/geforce_gtx_750_firmware
nvidia/geforce_gtx_750_ti_firmware
nvidia/geforce_gtx_840m_firmware
nvidia/geforce_gtx_845m_firmware
nvidia/geforce_gtx_850m_firmware
nvidia/geforce_gtx_860m_firmware
nvidia/geforce_gtx_950m_firmware
nvidia/geforce_gtx_960m_firmware
... and 7 more
Published Apr 01, 2019
Tracked Since Feb 18, 2026