Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
NVIDIA graphics drivers updater can install unsafe libraries
published 1 month ago
Summary
The NGX updater used by NVIDIA graphics drivers may load user‑space CUDA compatibility libraries that come from the host system rather than the trusted image. This could allow malicious code on the host to affect the driver installation. Update the drivers to the latest version and ensure only trusted libraries are present on the host.
What to do
- Update nvidia-graphics-drivers to version 590.48.01-0ubuntu1+e1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Echo | echo | nvidia-graphics-drivers | All versions |
| Echo | – | nvidia-graphics-drivers |
< 590.48.01-0ubuntu1+e1 Fix: upgrade to 590.48.01-0ubuntu1+e1
|
Original advisory text
Vulnerability is in the NGX updater, part of the host display-driver install. Echo ships only the userspace
cuda-compat libraries (libcuda, nvvm, ptxjitcompiler, ...) via the cuda-* packages; that
component is provided by the host, not the image.
https://github.com/NVIDIA/product-security/tree/main/2026/5861
References
Timeline
Published2 Oct 2026
Updated6 Oct 2026
First seen2 Oct 2026
Sources
ECHO-2f43-cc05-eee0 · OSV
Track software like this
Free during beta