What’s Vulnerable › Vulnerabilities

CVE-2021-1094

• Severity: medium (CVSS 6.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-07-22 · updated 2026-06-17
• Weakness: CWE-125

Description

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where an out of bounds array access may lead to denial of service or information disclosure.

Affected products

• Debian Linux: 9.0
• NVIDIA Guest driver: from 418.197.02 before 418.211.00; from 427.33 before 427.48; from 450.119.03 before 450.142.00; from 452.96 before 453.10; from 460.73.01 before 460.91.03; from 462.31 before 462.96 — fixed in 418.211.00, 427.48, 450.142.00, 453.10, 460.91.03, 462.96

How to fix

Upgrade to a fixed version: NVIDIA Guest driver 418.211.00, 427.48, 450.142.00, 453.10. Check the vendor advisory for mitigations.

References

• https://lists.debian.org/debian-lts-announce/2022/01/msg00013.html
• https://nvidia.custhelp.com/app/answers/detail/a_id/5211
• https://security.gentoo.org/glsa/202310-02
• https://lists.debian.org/debian-lts-announce/2022/01/msg00013.html
• https://nvidia.custhelp.com/app/answers/detail/a_id/5211
• https://security.gentoo.org/glsa/202310-02

Get alerted when CVE-2021-1094 or the next vulnerability affects your stack