MGASA-2021-0029
Dashboard / Vulnerabilities / MGASA-2021-0029
MGASA-2021-0029
Summary: Updated nvidia-current packages fix security vulnerabilities
Details: NVIDIA GPU Display Driver Linux contains a vulnerability in the kernel mode layer (nvidia.ko) IOCTL in which user-mode clients can access legacy privileged APIs, which may lead to denial of service, escalation of privileges, and information disclosure (CVE‑2021‑1052). NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko) IOCTL in which improper validation of a user pointer may lead to denial of service (CVE‑2021‑1053). NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko) in which it does not completely honor operating system file system permissions to provide GPU device-level isolation, which may lead to denial of service or information disclosure (CVE‑2021‑1056).
References: https://advisories.mageia.org/MGASA-2021-0029.html, https://bugs.mageia.org/show_bug.cgi?id=28063, https://nvidia.custhelp.com/app/answers/detail/a_id/5142/~/security-bulletin%3A-nvidia-gpu-display-driver---january-2021
Affected packages
Package
Name: ldetect-lst
Purl: pkg:rpm/mageia/ldetect-lst?arch=source&distro=mageia-7
Affected ranges
Type: ECOSYSTEM
Events:
