CVE-2015-5950
The NVIDIA display driver R352 before 353.82 and R340 before 341.81 on Windows; R304 before 304...
The NVIDIA display driver R352 before 353.82 and R340 before 341.81 on Windows; R304 before 304.128, R340 before 340.93, and R352 before 352.41 on Linux; and R352 before 352.46 on GRID vGPU and vSGA allows local users to write to an arbitrary kernel memory location and consequently gain privileges via a crafted ioctl call.
Exploit likelihood
What each source reports
NVD Score used
The NVIDIA display driver R352 before 353.82 and R340 before 341.81 on Windows; R304 before 304.128, R340 before 340.93, and R352 before 352.41 on Linux; and R352 before 352.46 on GRID vGPU and vSGA allows local users to write to an arbitrary kernel memory location and consequently gain privileges via a crafted ioctl call.
- Record
CVE-2015-5950- CVSS 2.0
- 6.9 Medium
AV:L/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
The NVIDIA display driver R352 before 353.82 and R340 before 341.81 on Windows; R304 before 304.128, R340 before 340.93, and R352 before 352.41 on Linux; and R352 before 352.46 on GRID vGPU and vSGA allows local users to write to an arbitrary kernel memory location and consequently gain privileges via a crafted ioctl call.
- Record
CVE-2015-5950- Updated
- 2026-11-02
EUVDEUVD-2015-5896 No score
The NVIDIA display driver R352 before 353.82 and R340 before 341.81 on Windows; R304 before 304.128, R340 before 340.93, and R352 before 352.41 on Linux; and R352 before 352.46 on GRID vGPU and vSGA allows local users to write to an arbitrary kernel memory location and consequently gain privileges via a crafted ioctl call.
- Record
EUVD-2015-5896- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-gc3p-rqcf-jm9p No score
The NVIDIA display driver R352 before 353.82 and R340 before 341.81 on Windows; R304 before 304...
The NVIDIA display driver R352 before 353.82 and R340 before 341.81 on Windows; R304 before 304.128, R340 before 340.93, and R352 before 352.41 on Linux; and R352 before 352.46 on GRID vGPU and vSGA allows local users to write to an arbitrary kernel memory location and consequently gain privileges via a crafted ioctl call.
- Record
GHSA-gc3p-rqcf-jm9p- Weakness
- CWE-119
- Updated
- 2026-11-02
OSV No score
The NVIDIA display driver R352 before 353.82 and R340 before 341.81 on Windows; R304 before 304.128, R340 before 340.93, and R352 before 352.41 on Linux; and R352 before 352.46 on GRID vGPU and vSGA allows local users to write to an arbitrary kernel memory location and consequently gain privileges via a crafted ioctl call.
- Record
CVE-2015-5950- Updated
- 2026-11-02
OSVDEBIAN-CVE-2015-5950 No score
The NVIDIA display driver R352 before 353.82 and R340 before 341.81 on Windows; R304 before 304.128, R340 before 340.93, and R352 before 352.41 on Linux; and R352 before 352.46 on GRID vGPU and vSGA allows local users to write to an arbitrary kernel memory location and consequently gain privileges via a crafted ioctl call.
- Record
DEBIAN-CVE-2015-5950- Updated
- 2026-11-02
OSVMGASA-2015-0407 No score
Updated nvidia driver packages fix security vulnerability
A vulnerability has been found in the nvidia proprietary driver that could be used to allow a local, non-privileged user to corrupt kernel memory. This could be used to gain local root privileges. A local user can issue a specially crafted IOCTL to write a 32-bit integer value stored in the kernel driver to a user-specified memory location, potentially in the kernel address space. The user has a limited ability to influence the value of the integer that is written. (CVE-2015-5950)
- Record
MGASA-2015-0407- Updated
- 2026-11-02
OSVUBUNTU-CVE-2015-5950 No score
The NVIDIA display driver R352 before 353.82 and R340 before 341.81 on Windows; R304 before 304.128, R340 before 340.93, and R352 before 352.41 on Linux; and R352 before 352.46 on GRID vGPU and vSGA allows local users to write to an arbitrary kernel memory location and consequently gain privileges via a crafted ioctl call.
- Record
UBUNTU-CVE-2015-5950- Updated
- 2026-11-02
OSVUSN-2747-1 No score
nvidia-graphics-drivers-304, nvidia-graphics-drivers-304-updates, nvidia-graphics-drivers-340, nvidia-graphics-drivers-340-updates, nvidia-graphics-drivers-346, nvidia-graphics-drivers-346-updates, jockey vulnerability
Dario Weisser discovered that the NVIDIA graphics drivers incorrectly handled certain IOCTL writes. A local attacker could use this issue to possibly gain root privileges.
- Record
USN-2747-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
nvidia-graphics-driversDebian:12 |
before 340.93-1, plus listed versions 1.0.6629+1-21.0.7167-11.0.7174-11.0.7174-21.0.7174-3 Show 45 moreShow less1.0.7174-41.0.7664-11.0.7664-21.0.7667-11.0.7667-31.0.7676-11.0.7676-21.0.8174-11.0.8178-0bpo11.0.8178-11.0.8178-21.0.8178-31.0.8756-11.0.8756-21.0.8756-31.0.8756-41.0.8762-11.0.8762-21.0.8774-11.0.8774-21.0.8774-31.0.8774-41.0.8774-51.0.8774-61.0.8774-71.0.8776-11.0.8776-21.0.8776-31.0.8776-41.0.9625-11.0.9625-21.0.9631-11.0.9746-11.0.9746-21.0.9755-1100.14.06-1100.14.09-1100.14.11-1100.14.19-1169.07-1169.07-2169.09-1169.12-1169.12-2169.12-3 |
340.93-1 |
nvidia-graphics-driversDebian:13 |
before 340.93-1, plus listed versions 1.0.6629+1-21.0.7167-11.0.7174-11.0.7174-21.0.7174-3 Show 45 moreShow less1.0.7174-41.0.7664-11.0.7664-21.0.7667-11.0.7667-31.0.7676-11.0.7676-21.0.8174-11.0.8178-0bpo11.0.8178-11.0.8178-21.0.8178-31.0.8756-11.0.8756-21.0.8756-31.0.8756-41.0.8762-11.0.8762-21.0.8774-11.0.8774-21.0.8774-31.0.8774-41.0.8774-51.0.8774-61.0.8774-71.0.8776-11.0.8776-21.0.8776-31.0.8776-41.0.9625-11.0.9625-21.0.9631-11.0.9746-11.0.9746-21.0.9755-1100.14.06-1100.14.09-1100.14.11-1100.14.19-1169.07-1169.07-2169.09-1169.12-1169.12-2169.12-3 |
340.93-1 |
nvidia-graphics-driversDebian:14 |
before 340.93-1, plus listed versions 1.0.6629+1-21.0.7167-11.0.7174-11.0.7174-21.0.7174-3 Show 45 moreShow less1.0.7174-41.0.7664-11.0.7664-21.0.7667-11.0.7667-31.0.7676-11.0.7676-21.0.8174-11.0.8178-0bpo11.0.8178-11.0.8178-21.0.8178-31.0.8756-11.0.8756-21.0.8756-31.0.8756-41.0.8762-11.0.8762-21.0.8774-11.0.8774-21.0.8774-31.0.8774-41.0.8774-51.0.8774-61.0.8774-71.0.8776-11.0.8776-21.0.8776-31.0.8776-41.0.9625-11.0.9625-21.0.9631-11.0.9746-11.0.9746-21.0.9755-1100.14.06-1100.14.09-1100.14.11-1100.14.19-1169.07-1169.07-2169.09-1169.12-1169.12-2169.12-3 |
340.93-1 |
ldetect-lstMageia:5 |
before 0.1.346.1-1.mga5 | 0.1.346.1-1.mga5 |
kmod-nvidia304Mageia:5 |
before 304.128-1.mga5.nonfree | 304.128-1.mga5.nonfree |
nvidia304Mageia:5 |
before 304.128-1.mga5.nonfree | 304.128-1.mga5.nonfree |
kmod-nvidia340Mageia:5 |
before 340.93-1.mga5.nonfree | 340.93-1.mga5.nonfree |
nvidia340Mageia:5 |
before 340.93-1.mga5.nonfree | 340.93-1.mga5.nonfree |
kmod-nvidia-currentMageia:5 |
before 346.96-1.mga5.nonfree | 346.96-1.mga5.nonfree |
nvidia-currentMageia:5 |
before 346.96-1.mga5.nonfree | 346.96-1.mga5.nonfree |
Show 6 moreShow less
| Package | Affected | Fixed |
|---|---|---|
nvidia-graphics-drivers-304Ubuntu:14.04:LTS |
before 304.128-0ubuntu0.0.1, plus listed versions 304.88-0ubuntu8304.88-0ubuntu9304.88-0ubuntu10304.88-0ubuntu11304.116-0ubuntu1 Show 4 moreShow less304.116-0ubuntu2304.117-0ubuntu1304.125-0ubuntu0.0.1304.125-0ubuntu0.0.2 |
304.128-0ubuntu0.0.1 |
nvidia-graphics-drivers-304-updatesUbuntu:14.04:LTS |
before 304.128-0ubuntu0.0.1, plus listed versions 304.108-0ubuntu1304.108-0ubuntu2304.108-0ubuntu3304.108-0ubuntu4304.116-0ubuntu1 Show 4 moreShow less304.116-0ubuntu2304.117-0ubuntu1304.125-0ubuntu0.0.1304.125-0ubuntu0.0.2 |
304.128-0ubuntu0.0.1 |
nvidia-graphics-drivers-340Ubuntu:14.04:LTS |
before 340.93-0ubuntu0.0.1, plus listed versions 340.76-0ubuntu0.1 |
340.93-0ubuntu0.0.1 |
nvidia-graphics-drivers-340-updatesUbuntu:14.04:LTS |
before 340.93-0ubuntu0.0.1, plus listed versions 340.76-0ubuntu0.1 |
340.93-0ubuntu0.0.1 |
nvidia-graphics-drivers-346Ubuntu:14.04:LTS |
before 346.96-0ubuntu0.0.1, plus listed versions 346.82-0ubuntu0.2 |
346.96-0ubuntu0.0.1 |
nvidia-graphics-drivers-346-updatesUbuntu:14.04:LTS |
before 346.96-0ubuntu0.0.1, plus listed versions 346.82-0ubuntu0.2 |
346.96-0ubuntu0.0.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2015-5950 is a medium vulnerability (CVSS 6.9) in Nvidia Display Driver, published September 25, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.36%, the 30th percentile. Fixed in nvidia-graphics-drivers 340.93-1.
References
support.lenovo.com/us/en/product_security/len_3313
h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04815468
ubuntu.com/usn/USN-2747-1
securitytracker.com/id/1033662
h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04815468
nvidia.custhelp.com/app/answers/detail/a_id/3763/~/cve-2015-5950-memory-corruption-due-to-an-unsanitized-pointer-in-the-nvidia
Show 8 moreShow less
nvd.nist.gov/vuln/detail/CVE-2015-5950
github.com/advisories/GHSA-gc3p-rqcf-jm9p
security-tracker.debian.org/tracker/CVE-2015-5950
advisories.mageia.org/MGASA-2015-0407.html
bugs.mageia.org/show_bug.cgi?id=16903
ubuntu.com/security/CVE-2015-5950
cve.org/CVERecord?id=CVE-2015-5950
Left out here: 537 versions. The JSON record has them.