Mageia 2021-0026: nvidia390 security update
Summary
NVIDIA GPU Display Driver Linux contains a vulnerability in the kernel mode
layer (nvidia.ko) IOCTL in which user-mode clients can access legacy
privileged APIs, which may lead to denial of service, escalation of privileges,
and information disclosure (CVE‑2021‑1052).
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel
mode layer (nvidia.ko) IOCTL in which improper validation of a user pointer
may lead to denial of service (CVE‑2021‑1053).
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel
mode layer (nvidia.ko) in which it does not completely honor operating system
file system permissions to provide GPU device-level isolation, which may
lead to denial of service or information disclosure (CVE‑2021‑1056).
References
- https://bugs.mageia.org/show_bug.cgi?id=28050
- https://nvidia.custhelp.com/app/answers/detail/a_id/5142/~/security-bulletin%3A-nvidia-gpu-display-driver---january-2021
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE‑2021‑1052
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE‑2021‑1053
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE‑2021‑1056
Resolution
MGASA-2021-0026 - Updated nvidia390 packages fix security vulnerabilities
SRPMS
- 7/nonfree/nvidia390-390.141-1.mga7.nonfree