Read the docs
TI-2020-04882 Aliases CVE-2020-5967GHSA-xmqv-9j73-gq5h

Race condition in NVIDIA GPU Display Driver

Priority LOW 21CWE-362Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
High
Impact type
—
Confidentiality · integrity · availability
None · None · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

NVIDIA Linux GPU Display Driver, all versions, contains a vulnerability in the UVM driver, in which a race condition may lead to a denial of service.

Why it matters now

EPSS 0.00272 19th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
NVIDIANVIDIA GPU Display DriverAll—No fix listedCNA
  • NVIDIA GPU Display Driver VendorNVIDIA Affected All Fixed in — No fix listed CNA

CPE configurations NVD · 11

CPEVersionsRoleVendor
cpe:2.3:o:nvidia:quadro_firmware:*:*:*:*:*:*:*:*390 to before 390.138; 440 to before 440.100; 450 to before 450.51VulnerableNVIDIA
cpe:2.3:h:nvidia:quadro:-:*:*:*:*:*:*:*not specified by NVDRunning onNVIDIA
cpe:2.3:o:nvidia:tesla_firmware:*:*:*:*:*:*:*:*418 to before 418.152.00; 440 to before 440.95.01; 450 to before 450.51.05VulnerableNVIDIA
cpe:2.3:h:nvidia:tesla:-:*:*:*:*:*:*:*not specified by NVDRunning onNVIDIA
cpe:2.3:o:nvidia:geforce_firmware:*:*:*:*:*:*:*:*390 to before 390.138; 440 to before 440.100; 450 to before 450.51VulnerableNVIDIA
cpe:2.3:h:nvidia:geforce:-:*:*:*:*:*:*:*not specified by NVDRunning onNVIDIA
cpe:2.3:o:nvidia:nvs_firmware:*:*:*:*:*:*:*:*390 to before 390.138; 440 to before 440.100; 450 to before 450.51VulnerableNVIDIA
cpe:2.3:h:nvidia:nvs:-:*:*:*:*:*:*:*not specified by NVDRunning onNVIDIA
cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*18.04VulnerableCanonical
cpe:2.3:o:canonical:ubuntu_linux:19.10:*:*:*:*:*:*:*19.10VulnerableCanonical
  • cpe:2.3:o:nvidia:quadro_firmware:*:*:*:*:*:*:*:* Versions 390 to before 390.138; 440 to before 440.100; 450 to before 450.51 Vulnerable ·NVIDIA
  • cpe:2.3:h:nvidia:quadro:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NVIDIA
  • cpe:2.3:o:nvidia:tesla_firmware:*:*:*:*:*:*:*:* Versions 418 to before 418.152.00; 440 to before 440.95.01; 450 to before 450.51.05 Vulnerable ·NVIDIA
  • cpe:2.3:h:nvidia:tesla:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NVIDIA
  • cpe:2.3:o:nvidia:geforce_firmware:*:*:*:*:*:*:*:* Versions 390 to before 390.138; 440 to before 440.100; 450 to before 450.51 Vulnerable ·NVIDIA
  • cpe:2.3:h:nvidia:geforce:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NVIDIA
  • cpe:2.3:o:nvidia:nvs_firmware:*:*:*:*:*:*:*:* Versions 390 to before 390.138; 440 to before 440.100; 450 to before 450.51 Vulnerable ·NVIDIA
  • cpe:2.3:h:nvidia:nvs:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NVIDIA
  • cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:* Versions 18.04 Vulnerable ·Canonical
  • cpe:2.3:o:canonical:ubuntu_linux:19.10:*:*:*:*:*:*:* Versions 19.10 Vulnerable ·Canonical
Show 1 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts:*:*:*20.04VulnerableCanonical
  • cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts:*:*:* Versions 20.04 Vulnerable ·Canonical

Remediation

No fixed version listed by the sources yet.

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Advisory ·

    NVIDIA GPU Display Driver — USN-4404-1

    2 records Highest priority Priority LOW 2 LOW

    Other records, highest priority first

    • TI-2020-04878 NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the Inter…Priority LOW 34
    Show all 2 records → Advisory →
  • Advisory ·

    NVIDIA GPU Display Driver — USN-4404-2

    2 records Highest priority Priority LOW 2 LOW

    Other records, highest priority first

    • TI-2020-04878 NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the Inter…Priority LOW 34
    Show all 2 records → Advisory →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2020-5967
  2. 2026-10-03 Alias added: GHSA-xmqv-9j73-gq5h

References

Advisory 3

  • TI-2020-04879 Insufficient verification of data authenticity in NVIDIA GPU Display Driver CVSS 3.1HIGH 7.8
  • TI-2020-04878 NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the Inter… CVSS 3.1HIGH 7.8
  • TI-2020-04877 NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the NVIDIA… CVSS 3.1HIGH 7.8
  • TI-2020-04880 Out-of-bounds read in NVIDIA GPU Display Driver CVSS 3.1MEDIUM 5.5

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences