A flaw was found in nvidia-driver. The driver's NGX updater relies on an outdated embedded cryptographic library that is susceptible to type confusion, an issue where data of one type is incorrectly treated as another. A local attacker with low privileges can exploit this vulnerability to achieve arbitrary code execution, trigger a denial of service (DoS), or access and modify sensitive system data.
Last checked: 2026-10-01 04:41 UTC
No exploitation evidence · CISA Coordinator (Assessed 2026-09-30 00:00 UTC)
Fix evidence last checked: 2026-10-01 17:17 UTC
Debian 12 (Bookworm)
Debian Security Tracker · Observed 2026-10-01