CVE-2020-5963: Canonical Ubuntu Linux

High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days.

NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the Inter Process Communication APIs, in which improper access control may lead to code execution, denial of service, or information disclosure.

Affected products

• Canonical Ubuntu Linux: version 18.04 only; version 19.10 only; version 20.04 only
• NVIDIA Geforce Firmware: from 390, before 390.138 (fixed in 390.138); from 440, before 440.100 (fixed in 440.100); from 450, before 450.51 (fixed in 450.51); from 450, before 451.48 (fixed in 451.48)
• NVIDIA Nvs Firmware: from 390, before 390.138 (fixed in 390.138); from 440, before 440.100 (fixed in 440.100); from 450, before 450.51 (fixed in 450.51); from 390, before 392.61 (fixed in 392.61); from 418, before 426.78 (fixed in 426.78); from 440, before 443.18 (fixed in 443.18); …
• NVIDIA Quadro Firmware: from 390, before 390.138 (fixed in 390.138); from 440, before 440.100 (fixed in 440.100); from 450, before 450.51 (fixed in 450.51); from 390, before 392.61 (fixed in 392.61); from 418, before 426.78 (fixed in 426.78); from 440, before 443.18 (fixed in 443.18); …
• NVIDIA Tesla Firmware: from 418, before 418.152.00 (fixed in 418.152.00); from 440, before 440.95.01 (fixed in 440.95.01); from 450, before 450.51.05 (fixed in 450.51.05); from 418, before 426.78 (fixed in 426.78); from 440, before 443.18 (fixed in 443.18)

Published 2020-06-25. Last modified 2026-06-17.