NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where an unprivileged regular user can cause truncation errors when casting a primitive to a primitive of smaller size causes data to be lost in the conversion, which may lead to denial of service or information disclosure.
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion.
When converting from one data type to another, such as long to integer, data can be omitted or translated in a way that produces unexpected values. If the resulting values are used in a sensitive context, then dangerous behaviors may occur.
| Link | Tags |
|---|---|
| https://nvidia.custhelp.com/app/answers/detail/a_id/5415 | vendor advisory |
| https://lists.debian.org/debian-lts-announce/2023/05/msg00010.html | mailing list |
| https://security.gentoo.org/glsa/202310-02 | third party advisory vendor advisory |