CVE-2021-1076

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2021-04-21 · updated 2026-06-17

Description

NVIDIA GPU Display Driver for Windows and Linux, all versions, contains a vulnerability in the kernel mode layer (nvlddmkm.sys or nvidia.ko) where improper access control may lead to denial of service, information disclosure, or data corruption.

Affected products

Debian Linux: 9.0
NVIDIA Guest driver: from 390 before 390.143; from 418 before 418.197.02; from 418 before 427.33; from 450 before 450.119.03; from 450 before 452.96; from 460 before 460.73.01 — fixed in 390.143, 418.197.02, 427.33, 450.119.03, 452.96, 460.73.01

How to fix

Upgrade to a fixed version: NVIDIA Guest driver 390.143, 418.197.02, 427.33, 450.119.03. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2021-1076 or the next vulnerability affects your stack