Descriptions are as published on MITRE and risk assessments follow CVSS. The following sections summarize the vulnerabilities. Variant 3 (CVE-2017-5754): At this time, NVIDIA has no reason to believe that NVIDIA software is vulnerable to this variant when running on affected CPUs.įor updates and additional information, actively monitor the NVIDIA Product Security page.NVIDIA expects to work together with its ecosystem partners on this variant. Variant 2 (CVE-2017-5715): NVIDIA’s initial analysis indicates that NVIDIA software running on affected CPUs may require further updates.

NVIDIA expects to work together with its ecosystem partners on future updates to further strengthen mitigations for affected CPUs. Variant 1 (CVE-2017-5753): CPU mitigations are provided with the security update included in this bulletin.The vulnerability has three known variants: As for our driver software, we are providing updates to help mitigate the CPU security issue. We believe our GPU hardware is immune to the reported security issue.

NVIDIA is providing an initial security update to mitigate aspects of Google Project Zero’s Janupublication of novel information disclosure attacks that combine CPU speculative execution with known side channels.

Best offset driver 2017