CVE-2020-5967: 
Linux Debian vulnerability analysis and mitigation

CVE-2020-5967 is a vulnerability discovered in the NVIDIA Linux GPU Display Driver affecting all versions. The vulnerability exists in the UVM (Unified Virtual Memory) driver component and was disclosed on June 25, 2020. The issue affects multiple NVIDIA products including GeForce, Quadro, NVS, and Tesla series graphics drivers across various versions (NVIDIA Advisory).

The vulnerability is characterized as a race condition in the UVM driver component. It has been assigned a CVSS v3.1 Base Score of 4.7 (Medium) with the vector string CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H. The vulnerability is classified under CWE-362 (Concurrent Execution using Shared Resource with Improper Synchronization) (NVD).

If exploited, this vulnerability can lead to a denial of service condition in affected systems. The impact is limited to availability, with no direct impact on confidentiality or integrity of the system (NVIDIA Advisory, Ubuntu Security).

The vulnerability requires local access to the system and high attack complexity to exploit. An attacker needs low privileges to execute the attack, and no user interaction is required (NVD).

NVIDIA has released security updates to address this vulnerability. For Linux systems, the fixed versions include: R450 version 450.51, R440 version 440.100, and R390 version 390.138 for GeForce, Quadro, and NVS products. For Tesla products, the fixed versions are R450 version 450.51.05, R440 version 440.95.01, and R418 version 418.152.00 (NVIDIA Advisory).