CVE-2016-7382
For the NVIDIA Quadro, NVS, GeForce, and Tesla products, NVIDIA GPU Display Driver contains a...
For the NVIDIA Quadro, NVS, GeForce, and Tesla products, NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys for Windows or nvidia.ko for Linux) handler where a missing permissions check may allow users to gain access to arbitrary physical memory, leading to an escalation of privileges.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
For the NVIDIA Quadro, NVS, GeForce, and Tesla products, NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys for Windows or nvidia.ko for Linux) handler where a missing permissions check may allow users to gain access to arbitrary physical memory, leading to an escalation of privileges.
- Record
CVE-2016-7382- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-275
- Updated
- 2026-11-02
CVE List No score
For the NVIDIA Quadro, NVS, GeForce, and Tesla products, NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys for Windows or nvidia.ko for Linux) handler where a missing permissions check may allow users to gain access to arbitrary physical memory, leading to an escalation of privileges.
- Record
CVE-2016-7382- Updated
- 2026-11-02
EUVDEUVD-2016-8238 No score
For the NVIDIA Quadro, NVS, GeForce, and Tesla products, NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys for Windows or nvidia.ko for Linux) handler where a missing permissions check may allow users to gain access to arbitrary physical memory, leading to an escalation of privileges.
- Record
EUVD-2016-8238- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-mv66-58mr-wjh5
For the NVIDIA Quadro, NVS, GeForce, and Tesla products, NVIDIA GPU Display Driver contains a...
For the NVIDIA Quadro, NVS, GeForce, and Tesla products, NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys for Windows or nvidia.ko for Linux) handler where a missing permissions check may allow users to gain access to arbitrary physical memory, leading to an escalation of privileges.
- Record
GHSA-mv66-58mr-wjh5- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSV
For the NVIDIA Quadro, NVS, GeForce, and Tesla products, NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys for Windows or nvidia.ko for Linux) handler where a missing permissions check may allow users to gain access to arbitrary physical memory, leading to an escalation of privileges.
- Record
CVE-2016-7382- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2016-7382
For the NVIDIA Quadro, NVS, GeForce, and Tesla products, NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys for Windows or nvidia.ko for Linux) handler where a missing permissions check may allow users to gain access to arbitrary physical memory, leading to an escalation of privileges.
- Record
DEBIAN-CVE-2016-7382- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Show 4 moreShow less
OSVUBUNTU-CVE-2016-7382
For the NVIDIA Quadro, NVS, GeForce, and Tesla products, NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys for Windows or nvidia.ko for Linux) handler where a missing permissions check may allow users to gain access to arbitrary physical memory, leading to an escalation of privileges.
- Record
UBUNTU-CVE-2016-7382- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVMGASA-2017-0013 No score
Updated nvidia304 and nvidia340 packages fix security vulnerabilities
This proprietary nvidia340 and nvidia304 driver update fixes the following security issues:
NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer (nvidia.ko) handler where a missing permissions check may allow users to gain access to arbitrary physical memory, leading to an escalation of privileges (CVE-2016-7382).
NVIDIA GPU Display Driver on Linux contains a vulnerability in the kernel mode layer (nvidia.ko) handler for mmap() where improper input validation may allow users to gain access to arbitrary physical memory, leading to an escalation of privileges (CVE-2016-7389).
NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer (nvidia.ko) where a user can cause a GPU interrupt storm, leading to a denial of service (CVE-2016-8826).
- Record
MGASA-2017-0013- Updated
- 2026-11-02
OSVMGASA-2017-0025 No score
Updated nvidia-current & ldetect-lst packages fix security vulnerabilities
This proprietary nvidia-current driver update provides an upgrade to the new R375 long lived branch adding support for nVidia Geforce 10 (GTX10xx, Pascal) series hardware and fixes the following security issues:
NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer (nvidia.ko) handler where a missing permissions check may allow users to gain access to arbitrary physical memory, leading to an escalation of privileges (CVE-2016-7382).
NVIDIA GPU Display Driver on Linux contains a vulnerability in the kernel mode layer (nvidia.ko) handler for mmap() where improper input validation may allow users to gain access to arbitrary physical memory, leading to an escalation of privileges (CVE-2016-7389).
NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer (nvidia.ko) where a user can cause a GPU interrupt storm, leading to a denial of service (CVE-2016-8826).
- Record
MGASA-2017-0025- Updated
- 2026-11-02
OSVUSN-3122-1 No score
nvidia-graphics-drivers-304, nvidia-graphics-drivers-340, nvidia-graphics-drivers-367 vulnerability
It was discovered that the NVIDIA graphics drivers incorrectly sanitized user mode inputs. A local attacker could use this issue to possibly gain root privileges.
- Record
USN-3122-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
nvidia-graphics-driversDebian:12 |
before 367.57-1, plus listed versions 1.0.6629+1-21.0.7167-11.0.7174-11.0.7174-21.0.7174-3 Show 45 moreShow less1.0.7174-41.0.7664-11.0.7664-21.0.7667-11.0.7667-31.0.7676-11.0.7676-21.0.8174-11.0.8178-0bpo11.0.8178-11.0.8178-21.0.8178-31.0.8756-11.0.8756-21.0.8756-31.0.8756-41.0.8762-11.0.8762-21.0.8774-11.0.8774-21.0.8774-31.0.8774-41.0.8774-51.0.8774-61.0.8774-71.0.8776-11.0.8776-21.0.8776-31.0.8776-41.0.9625-11.0.9625-21.0.9631-11.0.9746-11.0.9746-21.0.9755-1100.14.06-1100.14.09-1100.14.11-1100.14.19-1169.07-1169.07-2169.09-1169.12-1169.12-2169.12-3 |
367.57-1 |
nvidia-graphics-driversDebian:13 |
before 367.57-1, plus listed versions 1.0.6629+1-21.0.7167-11.0.7174-11.0.7174-21.0.7174-3 Show 45 moreShow less1.0.7174-41.0.7664-11.0.7664-21.0.7667-11.0.7667-31.0.7676-11.0.7676-21.0.8174-11.0.8178-0bpo11.0.8178-11.0.8178-21.0.8178-31.0.8756-11.0.8756-21.0.8756-31.0.8756-41.0.8762-11.0.8762-21.0.8774-11.0.8774-21.0.8774-31.0.8774-41.0.8774-51.0.8774-61.0.8774-71.0.8776-11.0.8776-21.0.8776-31.0.8776-41.0.9625-11.0.9625-21.0.9631-11.0.9746-11.0.9746-21.0.9755-1100.14.06-1100.14.09-1100.14.11-1100.14.19-1169.07-1169.07-2169.09-1169.12-1169.12-2169.12-3 |
367.57-1 |
nvidia-graphics-driversDebian:14 |
before 367.57-1, plus listed versions 1.0.6629+1-21.0.7167-11.0.7174-11.0.7174-21.0.7174-3 Show 45 moreShow less1.0.7174-41.0.7664-11.0.7664-21.0.7667-11.0.7667-31.0.7676-11.0.7676-21.0.8174-11.0.8178-0bpo11.0.8178-11.0.8178-21.0.8178-31.0.8756-11.0.8756-21.0.8756-31.0.8756-41.0.8762-11.0.8762-21.0.8774-11.0.8774-21.0.8774-31.0.8774-41.0.8774-51.0.8774-61.0.8774-71.0.8776-11.0.8776-21.0.8776-31.0.8776-41.0.9625-11.0.9625-21.0.9631-11.0.9746-11.0.9746-21.0.9755-1100.14.06-1100.14.09-1100.14.11-1100.14.19-1169.07-1169.07-2169.09-1169.12-1169.12-2169.12-3 |
367.57-1 |
nvidia304Mageia:5 From an advisory covering 3 CVEs |
before 304.134-1.mga5.nonfree | 304.134-1.mga5.nonfree |
nvidia340Mageia:5 From an advisory covering 3 CVEs |
before 340.101-1.mga5.nonfree | 340.101-1.mga5.nonfree |
ldetect-lstMageia:5 From an advisory covering 3 CVEs |
before 0.1.346.5-1.mga5 | 0.1.346.5-1.mga5 |
nvidia-currentMageia:5 From an advisory covering 3 CVEs |
before 375.26-1.mga5.nonfree | 375.26-1.mga5.nonfree |
nvidia-graphics-drivers-304Ubuntu:14.04:LTS |
before 304.132-0ubuntu0.14.04.2, plus listed versions 304.88-0ubuntu8304.88-0ubuntu9304.88-0ubuntu10304.88-0ubuntu11304.116-0ubuntu1 Show 7 moreShow less304.116-0ubuntu2304.117-0ubuntu1304.125-0ubuntu0.0.1304.125-0ubuntu0.0.2304.128-0ubuntu0.0.1304.131-0ubuntu0.14.04.1304.131-0ubuntu0.14.04.2 |
304.132-0ubuntu0.14.04.2 |
nvidia-graphics-drivers-340Ubuntu:14.04:LTS |
before 340.98-0ubuntu0.14.04.1, plus listed versions 340.76-0ubuntu0.1340.93-0ubuntu0.0.1340.96-0ubuntu0.14.04.1 |
340.98-0ubuntu0.14.04.1 |
nvidia-graphics-drivers-304Ubuntu:16.04:LTS |
before 304.132-0ubuntu0.16.04.2, plus listed versions 304.128-0ubuntu1304.131-0ubuntu2304.131-0ubuntu3 |
304.132-0ubuntu0.16.04.2 |
Show 7 moreShow less
| Package | Affected | Fixed |
|---|---|---|
nvidia-graphics-drivers-340Ubuntu:16.04:LTS |
before 340.98-0ubuntu0.16.04.1, plus listed versions 340.93-0ubuntu1340.93-0ubuntu2340.96-0ubuntu1340.96-0ubuntu2340.96-0ubuntu3 |
340.98-0ubuntu0.16.04.1 |
nvidia-graphics-drivers-304Ubuntu:14.04:LTS From an advisory covering 2 CVEs |
before 304.132-0ubuntu0.14.04.2, plus listed versions 304.88-0ubuntu8304.88-0ubuntu9304.88-0ubuntu10304.88-0ubuntu11304.116-0ubuntu1 Show 7 moreShow less304.116-0ubuntu2304.117-0ubuntu1304.125-0ubuntu0.0.1304.125-0ubuntu0.0.2304.128-0ubuntu0.0.1304.131-0ubuntu0.14.04.1304.131-0ubuntu0.14.04.2 |
304.132-0ubuntu0.14.04.2 |
nvidia-graphics-drivers-340Ubuntu:14.04:LTS From an advisory covering 2 CVEs |
before 340.98-0ubuntu0.14.04.1, plus listed versions 340.76-0ubuntu0.1340.93-0ubuntu0.0.1340.96-0ubuntu0.14.04.1 |
340.98-0ubuntu0.14.04.1 |
nvidia-graphics-drivers-367Ubuntu:14.04:LTS From an advisory covering 2 CVEs |
before 367.57-0ubuntu0.14.04.1 | 367.57-0ubuntu0.14.04.1 |
nvidia-graphics-drivers-304Ubuntu:16.04:LTS From an advisory covering 2 CVEs |
before 304.132-0ubuntu0.16.04.2, plus listed versions 304.128-0ubuntu1304.131-0ubuntu2304.131-0ubuntu3 |
304.132-0ubuntu0.16.04.2 |
nvidia-graphics-drivers-340Ubuntu:16.04:LTS From an advisory covering 2 CVEs |
before 340.98-0ubuntu0.16.04.1, plus listed versions 340.93-0ubuntu1340.93-0ubuntu2340.96-0ubuntu1340.96-0ubuntu2340.96-0ubuntu3 |
340.98-0ubuntu0.16.04.1 |
nvidia-graphics-drivers-367Ubuntu:16.04:LTS From an advisory covering 2 CVEs |
before 367.57-0ubuntu0.16.04.1 | 367.57-0ubuntu0.16.04.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2016-7382 is a high vulnerability (CVSS 7.8) in Nvidia Gpu Driver, published November 3, 2016. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.41%, the 35th percentile. Fixed in nvidia-graphics-drivers 367.57-1.
References
support.lenovo.com/us/en/solutions/LEN-10822
securityfocus.com/bid/94177
nvidia.custhelp.com/app/answers/detail/a_id/4246
nvd.nist.gov/vuln/detail/CVE-2016-7382
github.com/advisories/GHSA-mv66-58mr-wjh5
Show 10 moreShow less
security-tracker.debian.org/tracker/CVE-2016-7382
advisories.mageia.org/MGASA-2017-0013.html
bugs.mageia.org/show_bug.cgi?id=19993
ubuntu.com/security/CVE-2016-7382
cve.org/CVERecord?id=CVE-2016-7382
Left out here: 759 versions. The JSON record has them.