Description
The (1) cudaHostAlloc and (2) cuMemHostAlloc functions in the NVIDIA CUDA Toolkit 3.2 developer drivers for Linux 260.19.26, and possibly other versions, do not initialize pinned memory, which allows local users to read potentially sensitive memory, such as file fragments during read or write operations.
Affected products
- NVIDIA / CUDA Toolkit3.2 – 3.2
References
- MISChttp://www.securityfocus.com/bid/45717
- MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/64710
- MISChttp://classic.chem.msu.su/cgi-bin/ceilidh.exe/gran/gamess/forum/?C35e9ea936bHW-7676-1022+00.htm
- MISChttp://classic.chem.msu.su/cgi-bin/ceilidh.exe/gran/gamess/forum/?C35e9ea936bHW-7677-1391+00.htm
- MISChttp://osvdb.org/70420
- MISChttp://www.securityfocus.com/archive/1/515591/100/0/threaded
- VENDOR_ADVISORYhttp://secunia.com/advisories/42859
- MISChttp://classic.chem.msu.su/cgi-bin/ceilidh.exe/gran/gamess/forum/?C35e9ea936bHW-7681-487+00.htm
- MISChttp://www.securitytracker.com/id?1024962
- MISChttp://classic.chem.msu.su/cgi-bin/ceilidh.exe/gran/gamess/forum/?C35e9ea936bHW-7675-1380-00.htm
- MISChttp://www.securityfocus.com/archive/1/516121/100/0/threaded
- MISChttp://forums.nvidia.com/index.php?showtopic=190303