CVE-2024-0150: 
Linux Debian vulnerability analysis and mitigation

NVIDIA GPU display driver for Windows and Linux contains a vulnerability (CVE-2024-0150) where data is written past the end or before the beginning of a buffer. The vulnerability was disclosed in January 2025 and affects multiple NVIDIA GPU display driver versions across Windows and Linux operating systems (NVIDIA Security).

The vulnerability is classified as a buffer overflow issue (CWE-787) with a CVSS v3.1 base score of 7.1 (High severity). The attack vector is local (AV:L) with low attack complexity (AC:L), requiring low privileges (PR:L) and no user interaction (UI:N). The scope is unchanged (S:U), with no impact on confidentiality (C:N) but high impact on integrity and availability (I:H, A:H) (NVIDIA Security).

A successful exploitation of this vulnerability could lead to information disclosure, denial of service, or data tampering in affected systems (NVIDIA Security).

NVIDIA has released security updates to address this vulnerability. For Windows systems, updates are available in driver branches R535, R550, R560, R565, and R570. For Linux systems, updates are available in branches R535, R550, and R570. Users are advised to download and install the updated drivers through the NVIDIA Driver Downloads page (NVIDIA Security).