CVE-2024-0078: 
Linux Debian vulnerability analysis and mitigation

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability (CVE-2024-0078) in the kernel mode layer, where a user in a guest can cause a NULL-pointer dereference in the host. The vulnerability was disclosed in February 2024 and affects multiple NVIDIA driver branches including R550, R545, R535, and R470 (NVIDIA Security).

The vulnerability is classified with a CVSS v3.1 base score of 6.5 (Medium severity) and vector AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H. It is categorized under CWE-476 (NULL Pointer Dereference) affecting the kernel mode layer of the GPU display driver (NVIDIA Security).

A successful exploitation of this vulnerability may lead to denial of service in the host system when triggered by a user in a guest environment (NVIDIA Security).

The vulnerability requires local access with low complexity and low privileges to exploit. No user interaction is required for exploitation (NVIDIA Security).

NVIDIA has released security updates to address this vulnerability. For Windows systems, updates are available in versions 551.61 (R550), 538.33 (R535), and 474.82 (R470). For Linux systems, the fixed versions are 550.54.14 (R550), 535.161.07 (R535), and 470.239.06 (R470). Users are advised to update to these versions through the NVIDIA Driver Downloads page (NVIDIA Security).