CVE-2018-6249
NVIDIA GPU Display Driver contains a vulnerability in kernel mode layer handler where a NULL...
NVIDIA GPU Display Driver contains a vulnerability in kernel mode layer handler where a NULL pointer dereference may lead to denial of service or potential escalation of privileges.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
NVIDIA GPU Display Driver contains a vulnerability in kernel mode layer handler where a NULL pointer dereference may lead to denial of service or potential escalation of privileges.
- Record
CVE-2018-6249- CVSS 3.0
- 8.8 High
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H - CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-476
- Updated
- 2026-11-02
CVE List No score
NVIDIA GPU Display Driver contains a vulnerability in kernel mode layer handler where a NULL pointer dereference may lead to denial of service or potential escalation of privileges.
- Record
CVE-2018-6249- Updated
- 2026-11-02
EUVDEUVD-2018-18010 No score
NVIDIA GPU Display Driver contains a vulnerability in kernel mode layer handler where a NULL pointer dereference may lead to denial of service or potential escalation of privileges.
- Record
EUVD-2018-18010- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-jmgj-8q9j-9228
NVIDIA GPU Display Driver contains a vulnerability in kernel mode layer handler where a NULL...
NVIDIA GPU Display Driver contains a vulnerability in kernel mode layer handler where a NULL pointer dereference may lead to denial of service or potential escalation of privileges.
- Record
GHSA-jmgj-8q9j-9228- CVSS 3.0
- 8.8 High
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H - Weakness
- CWE-476
- Updated
- 2026-11-02
OSV
NVIDIA GPU Display Driver contains a vulnerability in kernel mode layer handler where a NULL pointer dereference may lead to denial of service or potential escalation of privileges.
- Record
CVE-2018-6249- CVSS 3.0
- 8.8 High
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2018-6249
NVIDIA GPU Display Driver contains a vulnerability in kernel mode layer handler where a NULL pointer dereference may lead to denial of service or potential escalation of privileges.
- Record
DEBIAN-CVE-2018-6249- CVSS 3.0
- 8.8 High
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2018-6249
NVIDIA GPU Display Driver contains a vulnerability in kernel mode layer handler where a NULL pointer dereference may lead to denial of service or potential escalation of privileges.
- Record
UBUNTU-CVE-2018-6249- CVSS 3.0
- 8.8 High
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUSN-3662-1 No score
nvidia-graphics-drivers-384 vulnerabilities
It was discovered that the NVIDIA graphics drivers contained flaws in the kernel mode layer. A local attacker could use these issues to cause a denial of service or potentially escalate their privileges on the system.
- Record
USN-3662-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
nvidia-graphics-driversDebian:12 |
before 390.48-1, plus listed versions 1.0.6629+1-21.0.7167-11.0.7174-11.0.7174-21.0.7174-3 Show 45 moreShow less1.0.7174-41.0.7664-11.0.7664-21.0.7667-11.0.7667-31.0.7676-11.0.7676-21.0.8174-11.0.8178-0bpo11.0.8178-11.0.8178-21.0.8178-31.0.8756-11.0.8756-21.0.8756-31.0.8756-41.0.8762-11.0.8762-21.0.8774-11.0.8774-21.0.8774-31.0.8774-41.0.8774-51.0.8774-61.0.8774-71.0.8776-11.0.8776-21.0.8776-31.0.8776-41.0.9625-11.0.9625-21.0.9631-11.0.9746-11.0.9746-21.0.9755-1100.14.06-1100.14.09-1100.14.11-1100.14.19-1169.07-1169.07-2169.09-1169.12-1169.12-2169.12-3 |
390.48-1 |
nvidia-graphics-driversDebian:13 |
before 390.48-1, plus listed versions 1.0.6629+1-21.0.7167-11.0.7174-11.0.7174-21.0.7174-3 Show 45 moreShow less1.0.7174-41.0.7664-11.0.7664-21.0.7667-11.0.7667-31.0.7676-11.0.7676-21.0.8174-11.0.8178-0bpo11.0.8178-11.0.8178-21.0.8178-31.0.8756-11.0.8756-21.0.8756-31.0.8756-41.0.8762-11.0.8762-21.0.8774-11.0.8774-21.0.8774-31.0.8774-41.0.8774-51.0.8774-61.0.8774-71.0.8776-11.0.8776-21.0.8776-31.0.8776-41.0.9625-11.0.9625-21.0.9631-11.0.9746-11.0.9746-21.0.9755-1100.14.06-1100.14.09-1100.14.11-1100.14.19-1169.07-1169.07-2169.09-1169.12-1169.12-2169.12-3 |
390.48-1 |
nvidia-graphics-driversDebian:14 |
before 390.48-1, plus listed versions 1.0.6629+1-21.0.7167-11.0.7174-11.0.7174-21.0.7174-3 Show 45 moreShow less1.0.7174-41.0.7664-11.0.7664-21.0.7667-11.0.7667-31.0.7676-11.0.7676-21.0.8174-11.0.8178-0bpo11.0.8178-11.0.8178-21.0.8178-31.0.8756-11.0.8756-21.0.8756-31.0.8756-41.0.8762-11.0.8762-21.0.8774-11.0.8774-21.0.8774-31.0.8774-41.0.8774-51.0.8774-61.0.8774-71.0.8776-11.0.8776-21.0.8776-31.0.8776-41.0.9625-11.0.9625-21.0.9631-11.0.9746-11.0.9746-21.0.9755-1100.14.06-1100.14.09-1100.14.11-1100.14.19-1169.07-1169.07-2169.09-1169.12-1169.12-2169.12-3 |
390.48-1 |
nvidia-graphics-drivers-384Ubuntu:14.04:LTS |
before 384.130-0ubuntu0.14.04.1, plus listed versions 384.90-0ubuntu0.14.04.1384.111-0ubuntu0.14.04.1 |
384.130-0ubuntu0.14.04.1 |
nvidia-graphics-drivers-384Ubuntu:16.04:LTS |
before 384.130-0ubuntu0.16.04.1, plus listed versions 384.90-0ubuntu0.16.04.1384.90-0ubuntu0.16.04.2384.111-0ubuntu0.16.04.1 |
384.130-0ubuntu0.16.04.1 |
nvidia-graphics-drivers-304Ubuntu:16.04:LTS |
All versions, plus listed versions 304.128-0ubuntu1304.131-0ubuntu2304.131-0ubuntu3304.132-0ubuntu0.16.04.2304.134-0ubuntu0.16.04.1304.135-0ubuntu0.16.04.1304.135-0ubuntu0.16.04.2304.135-0ubuntu0.16.04.3 |
None known |
nvidia-graphics-drivers-340Ubuntu:16.04:LTS |
All versions, plus listed versions 340.93-0ubuntu1340.93-0ubuntu2340.96-0ubuntu1340.96-0ubuntu2340.96-0ubuntu3 Show 6 moreShow less340.98-0ubuntu0.16.04.1340.101-0ubuntu0.16.04.1340.102-0ubuntu0.16.04.1340.102-0ubuntu0.16.04.2340.104-0ubuntu0.16.04.1340.107-0ubuntu0.16.04.2 |
None known |
nvidia-graphics-drivers-340Ubuntu:18.04:LTS |
All versions, plus listed versions 340.104-0ubuntu2340.104-0ubuntu3340.106-0ubuntu1340.106-0ubuntu2340.106-0ubuntu3 Show 5 moreShow less340.107-0ubuntu0.18.04.1340.107-0ubuntu0.18.04.2340.107-0ubuntu0.18.04.3340.107-0ubuntu0.18.04.4340.108-0ubuntu0.18.04.1 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases, products | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2018-6249 is a high vulnerability (CVSS 8.8) in Nvidia Gpu Display Driver, published April 2, 2018. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.40%, the 34th percentile. Fixed in nvidia-graphics-drivers 390.48-1.
References
nvidia.custhelp.com/app/answers/detail/a_id/4649
usn.ubuntu.com/3662-1
nvd.nist.gov/vuln/detail/CVE-2018-6249
github.com/advisories/GHSA-jmgj-8q9j-9228
security-tracker.debian.org/tracker/CVE-2018-6249
ubuntu.com/security/CVE-2018-6249
cve.org/CVERecord?id=CVE-2018-6249
Left out here: 951 versions. The JSON record has them.