Read the docs
TI-2012-00877 Aliases CVE-2012-0953GHSA-hrhp-pg6r-2xqh

Kernel heap contents leak race in ioctl handler

Priority LOW 22CWE-362Published · Updated

Key facts

Attack vector
Local
Privileges required
High
User interaction
None
Attack complexity
High
Impact type
—
Confidentiality · integrity · availability
Low · Low · Low
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA.

Summary

A race condition was discovered in the Linux drivers for Nvidia graphics which allowed an attacker to exfiltrate kernel memory to userspace. This issue was fixed in version 295.53.

Why it matters now

EPSS 0.00246 15th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Fixed graphics drivers (nvidia): 295.53

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
NVIDIAgraphics driversbefore 295.53295.53Patch availableCNA
  • graphics drivers VendorNVIDIA Affected before 295.53 Fixed in 295.53 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:nvidia:display_driver:*:*:*:*:*:linux:*:*before 295.53VulnerableNVIDIA
  • cpe:2.3:a:nvidia:display_driver:*:*:*:*:*:linux:*:* Versions before 295.53 Vulnerable ·NVIDIA

Remediation

  • Fix · CNA graphics drivers (nvidia) Fixed in 295.53

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    nvidia graphics drivers 295.53

    2 records Highest priority Priority LOW 2 LOW

    Other records, highest priority first

    • TI-2012-00876 Heap overflow in control device ioctlPriority LOW 23
    Show all 2 records →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2012-0953
  2. 2026-10-03 Alias added: GHSA-hrhp-pg6r-2xqh

References

Exploit 1

  • TI-2013-00053 The NVIDIA driver before 307.78, and Release 310 before 311.00, in the NVIDIA Display… CVSS 2.0HIGH 7.2
  • TI-2012-00875 Out-of-bounds write in NVIDIA graphics drivers CVSS 3.1HIGH 7.8
  • TI-2015-05040 The NVIDIA display driver R352 before 353.82 and R340 before 341.81 on Windows; R304… CVSS 2.0MEDIUM 6.9
  • TI-2012-00876 Heap overflow in control device ioctl CVSS 3.1MEDIUM 5.0

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences