CVE-2012-0953

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

A race condition was discovered in the Linux drivers for Nvidia graphics which allowed an attacker to exfiltrate kernel memory to userspace. This issue was fixed in version 295.53.

Metrics

CVSS 3.1 5.0/10CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L

Weakness enumeration

CWE-362

Affected software

Vendor	Product	Versions
nvidia	graphics drivers	>= unspecified, < 295.53

References

https://bugs.launchpad.net/ubuntu/+source/nvidia-graphics-drivers/+bug/979373Exploit, Third Party Advisory
https://bugs.launchpad.net/ubuntu/+source/nvidia-graphics-drivers/+bug/979373Exploit, Third Party Advisory

Timeline

Published: May 8, 2020
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2012

CVE-2012-09542.6APT 0.7.x before 0.7.25 and 0.8.x before 0.8.16, when using the apt-key net-update to import keyrings, relies on GnuPG argument order and do CVE-2012-09557.4software-properties was vulnerable to a person-in-the-middle attack due to incorrect TLS certificate validation in softwareproperties/ppa.py CVE-2012-09566.8ubiquity-slideshow-ubuntu before 58.2, during installation, allows remote man-in-the-middle attackers to execute arbitrary web script or HTM CVE-2012-09574.9The override_release function in kernel/sys.c in the Linux kernel before 3.4.16 allows local users to obtain sensitive information from kern CVE-2012-09584.3content/unity-api.js in the unity-firefox-extension extension 2.4.1 for Firefox exposes the toDataURL function in an API call, which allows CVE-2012-09592.1Remote Login Service (RLS) 1.0.0 does not properly clear account information when switching users, which might allow physically proximate us CVE-2012-09607.5Unity integration extension (unity-firefox-extension) before 2.4.1 for Firefox does not properly handle callbacks, which allows remote attac CVE-2012-09612.1Apt 0.8.16~exp5ubuntu13.x before 0.8.16~exp5ubuntu13.6, 0.8.16~exp12ubuntu10.x before 0.8.16~exp12ubuntu10.7, and 0.9.7.5ubuntu5.x before 0.CVE-2012-09624.3Aptdaemon 0.43 in Ubuntu 11.10 and 12.04 LTS uses short IDs when importing PPA GPG keys from a keyserver, which allows remote attackers to i CVE-2012-09737.5Multiple SQL injection vulnerabilities in OSClass before 2.3.5 allow remote attackers to execute arbitrary SQL commands via the sCategory pa CVE-2012-09744.3Multiple cross-site scripting (XSS) vulnerabilities in the getParam function in oc-includes/osclass/core/Params.php in OSClass before 2.3.5 CVE-2012-09754.3Cross-site scripting (XSS) vulnerability in misc.php in Image Hosting Script DPI 1.0, 1.3, and earlier allows remote attackers to inject arb