CVE-2020-5973
NVIDIA Virtual GPU Manager and the guest drivers contain a vulnerability in vGPU plugin, in which...
NVIDIA Virtual GPU Manager and the guest drivers contain a vulnerability in vGPU plugin, in which there is the potential to execute privileged operations, which may lead to denial of service. This affects vGPU version 8.x (prior to 8.4), version 9.x (prior to 9.4) and version 10.x (prior to 10.3).
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- High
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
NVIDIA Virtual GPU Manager and the guest drivers contain a vulnerability in vGPU plugin, in which there is the potential to execute privileged operations, which may lead to denial of service. This affects vGPU version 8.x (prior to 8.4), version 9.x (prior to 9.4) and version 10.x (prior to 10.3).
- Record
CVE-2020-5973- CVSS 3.1
- 4.4 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H - CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
NVIDIA Virtual GPU Manager and the guest drivers contain a vulnerability in vGPU plugin, in which there is the potential to execute privileged operations, which may lead to denial of service. This affects vGPU version 8.x (prior to 8.4), version 9.x (prior to 9.4) and version 10.x (prior to 10.3).
- Record
CVE-2020-5973- Updated
- 2026-11-02
EUVDEUVD-2020-27127 No score
NVIDIA Virtual GPU Manager and the guest drivers contain a vulnerability in vGPU plugin, in which there is the potential to execute privileged operations, which may lead to denial of service. This affects vGPU version 8.x (prior to 8.4), version 9.x (prior to 9.4) and version 10.x (prior to 10.3).
- Record
EUVD-2020-27127- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-h6g8-26w8-pwgp No score
NVIDIA Virtual GPU Manager and the guest drivers contain a vulnerability in vGPU plugin, in which...
NVIDIA Virtual GPU Manager and the guest drivers contain a vulnerability in vGPU plugin, in which there is the potential to execute privileged operations, which may lead to denial of service. This affects vGPU version 8.x (prior to 8.4), version 9.x (prior to 9.4) and version 10.x (prior to 10.3).
- Record
GHSA-h6g8-26w8-pwgp- Weakness
- CWE-20
- Updated
- 2026-11-02
OSVUBUNTU-CVE-2020-5973
NVIDIA Virtual GPU Manager and the guest drivers contain a vulnerability in vGPU plugin, in which there is the potential to execute privileged operations, which may lead to denial of service. This affects vGPU version 8.x (prior to 8.4), version 9.x (prior to 9.4) and version 10.x (prior to 10.3).
- Record
UBUNTU-CVE-2020-5973- CVSS 3.1
- 4.4 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVUSN-4404-1 No score
nvidia-graphics-drivers-390, nvidia-graphics-drivers-440 vulnerabilities
Thomas E. Carroll discovered that the NVIDIA Cuda grpahics driver did not properly perform access control when performing IPC. An attacker could use this to cause a denial of service or possibly execute arbitrary code. (CVE-2020-5963)
It was discovered that the UVM driver in the NVIDIA graphics driver contained a race condition. A local attacker could use this to cause a denial of service. (CVE-2020-5967)
It was discovered that the NVIDIA virtual GPU guest drivers contained an unspecified vulnerability that could potentially lead to privileged operation execution. An attacker could use this to cause a denial of service. (CVE-2020-5973)
- Record
USN-4404-1- Updated
- 2026-11-02
OSVUSN-4404-2 No score
linux kernel vulnerabilities
USN-4404-1 fixed vulnerabilities in the NVIDIA graphics drivers. This update provides the corresponding updates for the NVIDIA Linux DKMS kernel modules.
Original advisory details:
Thomas E. Carroll discovered that the NVIDIA Cuda grpahics driver did not properly perform access control when performing IPC. An attacker could use this to cause a denial of service or possibly execute arbitrary code. (CVE-2020-5963)
It was discovered that the UVM driver in the NVIDIA graphics driver contained a race condition. A local attacker could use this to cause a denial of service. (CVE-2020-5967)
It was discovered that the NVIDIA virtual GPU guest drivers contained an unspecified vulnerability that could potentially lead to privileged operation execution. An attacker could use this to cause a denial of service. (CVE-2020-5973)
- Record
USN-4404-2- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
nvidia-graphics-drivers-390Ubuntu:18.04:LTS |
before 390.138-0ubuntu0.18.04.1, plus listed versions 390.25-0ubuntu1390.25-0ubuntu3390.25-0ubuntu4390.42-0ubuntu1390.48-0ubuntu1 Show 7 moreShow less390.48-0ubuntu2390.48-0ubuntu3390.77-0ubuntu0.18.04.1390.77-0ubuntu0.18.04.2390.116-0ubuntu0.18.04.1390.116-0ubuntu0.18.04.3390.132-0ubuntu0.18.04.1 |
390.138-0ubuntu0.18.04.1 |
nvidia-graphics-drivers-440Ubuntu:18.04:LTS |
before 440.100-0ubuntu0.18.04.1, plus listed versions 440.59-0ubuntu0.18.04.1 |
440.100-0ubuntu0.18.04.1 |
nvidia-graphics-drivers-390Ubuntu:20.04:LTS |
before 390.138-0ubuntu0.20.04.1, plus listed versions 390.129-0ubuntu2390.132-0ubuntu1390.132-0ubuntu2 |
390.138-0ubuntu0.20.04.1 |
nvidia-graphics-drivers-440Ubuntu:20.04:LTS |
before 440.100-0ubuntu0.20.04.1, plus listed versions 440.31-0ubuntu1440.36-0ubuntu1440.44-0ubuntu1440.44-0ubuntu2440.59-0ubuntu1 Show 8 moreShow less440.59-0ubuntu2440.64-0ubuntu1440.64-0ubuntu2440.64-0ubuntu3440.82-0ubuntu1440.82+really.440.64-0ubuntu4440.82+really.440.64-0ubuntu5440.82+really.440.64-0ubuntu6 |
440.100-0ubuntu0.20.04.1 |
nvidia-graphics-drivers-390Ubuntu:18.04:LTS From an advisory covering 3 CVEs |
before 390.138-0ubuntu0.18.04.1, plus listed versions 390.25-0ubuntu1390.25-0ubuntu3390.25-0ubuntu4390.42-0ubuntu1390.48-0ubuntu1 Show 7 moreShow less390.48-0ubuntu2390.48-0ubuntu3390.77-0ubuntu0.18.04.1390.77-0ubuntu0.18.04.2390.116-0ubuntu0.18.04.1390.116-0ubuntu0.18.04.3390.132-0ubuntu0.18.04.1 |
390.138-0ubuntu0.18.04.1 |
nvidia-graphics-drivers-440Ubuntu:18.04:LTS From an advisory covering 3 CVEs |
before 440.100-0ubuntu0.18.04.1, plus listed versions 440.59-0ubuntu0.18.04.1 |
440.100-0ubuntu0.18.04.1 |
nvidia-graphics-drivers-390Ubuntu:20.04:LTS From an advisory covering 3 CVEs |
before 390.138-0ubuntu0.20.04.1, plus listed versions 390.129-0ubuntu2390.132-0ubuntu1390.132-0ubuntu2 |
390.138-0ubuntu0.20.04.1 |
nvidia-graphics-drivers-440Ubuntu:20.04:LTS From an advisory covering 3 CVEs |
before 440.100-0ubuntu0.20.04.1, plus listed versions 440.31-0ubuntu1440.36-0ubuntu1440.44-0ubuntu1440.44-0ubuntu2440.59-0ubuntu1 Show 8 moreShow less440.59-0ubuntu2440.64-0ubuntu1440.64-0ubuntu2440.64-0ubuntu3440.82-0ubuntu1440.82+really.440.64-0ubuntu4440.82+really.440.64-0ubuntu5440.82+really.440.64-0ubuntu6 |
440.100-0ubuntu0.20.04.1 |
linuxUbuntu:18.04:LTS From an advisory covering 3 CVEs |
before 4.15.0-108.109, plus listed versions 4.13.0-16.194.13.0-17.204.13.0-25.294.13.0-32.354.15.0-10.11 Show 45 moreShow less4.15.0-12.134.15.0-13.144.15.0-15.164.15.0-19.204.15.0-20.214.15.0-22.244.15.0-23.254.15.0-24.264.15.0-29.314.15.0-30.324.15.0-32.354.15.0-33.364.15.0-34.374.15.0-36.394.15.0-38.414.15.0-39.424.15.0-42.454.15.0-43.464.15.0-44.474.15.0-45.484.15.0-46.494.15.0-47.504.15.0-48.514.15.0-50.544.15.0-51.554.15.0-52.564.15.0-54.584.15.0-55.604.15.0-58.644.15.0-60.674.15.0-62.694.15.0-64.734.15.0-65.744.15.0-66.754.15.0-69.784.15.0-70.794.15.0-72.814.15.0-74.844.15.0-76.864.15.0-88.884.15.0-91.924.15.0-96.974.15.0-99.1004.15.0-101.1024.15.0-106.107 |
4.15.0-108.109 |
linux-awsUbuntu:18.04:LTS From an advisory covering 3 CVEs |
before 4.15.0-1076.80, plus listed versions 4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1007.7 Show 39 moreShow less4.15.0-1009.94.15.0-1010.104.15.0-1011.114.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1027.274.15.0-1029.304.15.0-1031.334.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1035.374.15.0-1037.394.15.0-1039.414.15.0-1040.424.15.0-1041.434.15.0-1043.454.15.0-1044.464.15.0-1045.474.15.0-1047.494.15.0-1048.504.15.0-1050.524.15.0-1051.534.15.0-1052.544.15.0-1054.564.15.0-1056.584.15.0-1057.594.15.0-1058.604.15.0-1060.624.15.0-1063.674.15.0-1065.694.15.0-1066.704.15.0-1067.714.15.0-1073.77 |
4.15.0-1076.80 |
Show 13 moreShow less
| Package | Affected | Fixed |
|---|---|---|
linux-aws-5.3Ubuntu:18.04:LTS From an advisory covering 3 CVEs |
before 5.3.0-1028.30~18.04.1, plus listed versions 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.1 |
5.3.0-1028.30~18.04.1 |
linux-azure-5.3Ubuntu:18.04:LTS From an advisory covering 3 CVEs |
before 5.3.0-1031.32~18.04.1, plus listed versions 5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1 Show 7 moreShow less5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.1 |
5.3.0-1031.32~18.04.1 |
linux-gcp-5.3Ubuntu:18.04:LTS From an advisory covering 3 CVEs |
before 5.3.0-1029.31~18.04.1, plus listed versions 5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1 Show 5 moreShow less5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.1 |
5.3.0-1029.31~18.04.1 |
linux-hweUbuntu:18.04:LTS From an advisory covering 3 CVEs |
before 5.3.0-61.55~18.04.1, plus listed versions 4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1 Show 24 moreShow less4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.1 |
5.3.0-61.55~18.04.1 |
linux-oemUbuntu:18.04:LTS From an advisory covering 3 CVEs |
before 4.15.0-1090.100, plus listed versions 4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12 Show 34 moreShow less4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.97 |
4.15.0-1090.100 |
linux-oem-osp1Ubuntu:18.04:LTS From an advisory covering 3 CVEs |
before 5.0.0-1062.67, plus listed versions 5.0.0-1010.115.0.0-1012.135.0.0-1015.165.0.0-1018.205.0.0-1020.22 Show 16 moreShow less5.0.0-1022.245.0.0-1024.275.0.0-1025.285.0.0-1027.315.0.0-1028.325.0.0-1030.345.0.0-1033.385.0.0-1037.425.0.0-1039.445.0.0-1040.455.0.0-1043.485.0.0-1046.515.0.0-1047.525.0.0-1050.555.0.0-1052.575.0.0-1059.64 |
5.0.0-1062.67 |
linux-oracleUbuntu:18.04:LTS From an advisory covering 3 CVEs |
before 4.15.0-1047.51, plus listed versions 4.15.0-1007.94.15.0-1008.104.15.0-1009.114.15.0-1010.124.15.0-1011.13 Show 20 moreShow less4.15.0-1013.154.15.0-1014.164.15.0-1015.174.15.0-1017.194.15.0-1018.204.15.0-1021.234.15.0-1022.254.15.0-1023.264.15.0-1025.284.15.0-1026.294.15.0-1027.304.15.0-1029.324.15.0-1030.334.15.0-1031.344.15.0-1033.364.15.0-1035.394.15.0-1037.414.15.0-1038.424.15.0-1039.434.15.0-1045.49 |
4.15.0-1047.51 |
linux-oracle-5.3Ubuntu:18.04:LTS From an advisory covering 3 CVEs |
before 5.3.0-1027.29~18.04.1, plus listed versions 5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.15.3.0-1024.26~18.04.1 |
5.3.0-1027.29~18.04.1 |
linuxUbuntu:20.04:LTS From an advisory covering 3 CVEs |
before 5.4.0-39.43, plus listed versions 5.3.0-18.195.3.0-24.265.4.0-9.125.4.0-18.225.4.0-21.25 Show 8 moreShow less5.4.0-24.285.4.0-25.295.4.0-26.305.4.0-28.325.4.0-29.335.4.0-31.355.4.0-33.375.4.0-37.41 |
5.4.0-39.43 |
linux-awsUbuntu:20.04:LTS From an advisory covering 3 CVEs |
before 5.4.0-1017.17, plus listed versions 5.3.0-1003.35.3.0-1008.95.3.0-1009.105.3.0-1010.115.4.0-1005.5 Show 5 moreShow less5.4.0-1007.75.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.15 |
5.4.0-1017.17 |
linux-azureUbuntu:20.04:LTS From an advisory covering 3 CVEs |
before 5.4.0-1019.19, plus listed versions 5.3.0-1003.35.3.0-1008.95.3.0-1009.105.4.0-1006.65.4.0-1008.8 Show 4 moreShow less5.4.0-1009.95.4.0-1010.105.4.0-1012.125.4.0-1016.16 |
5.4.0-1019.19 |
linux-gcpUbuntu:20.04:LTS From an advisory covering 3 CVEs |
before 5.4.0-1018.18, plus listed versions 5.3.0-1004.45.3.0-1009.105.3.0-1011.125.4.0-1005.55.4.0-1007.7 Show 4 moreShow less5.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.15 |
5.4.0-1018.18 |
linux-oracleUbuntu:20.04:LTS From an advisory covering 3 CVEs |
before 5.4.0-1018.18, plus listed versions 5.3.0-1002.25.3.0-1007.85.3.0-1008.95.4.0-1005.55.4.0-1007.7 Show 4 moreShow less5.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.15 |
5.4.0-1018.18 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2020-5973 is a medium vulnerability (CVSS 4.4) in Nvidia Virtual Gpu, published June 24, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.40%, the 34th percentile. Fixed in nvidia-graphics-drivers-390 390.138-0ubuntu0.18.04.1.