USN-4689-1

Dashboard / Vulnerabilities / USN-4689-1

USN-4689-1

Summary: nvidia-graphics-drivers-390, nvidia-graphics-drivers-450, nvidia-graphics-drivers-460 vulnerabilities

Details: It was discovered that the NVIDIA GPU display driver for the Linux kernel contained a vulnerability that allowed user-mode clients to access legacy privileged APIs. A local attacker could use this to cause a denial of service or escalate privileges. (CVE-2021-1052) It was discovered that the NVIDIA GPU display driver for the Linux kernel did not properly validate a pointer received from userspace in some situations. A local attacker could use this to cause a denial of service. (CVE-2021-1053) Xinyuan Lyu discovered that the NVIDIA GPU display driver for the Linux kernel did not properly restrict device-level GPU isolation. A local attacker could use this to cause a denial of service or possibly expose sensitive information. (CVE-2021-1056)

References: https://ubuntu.com/security/notices/USN-4689-1, https://ubuntu.com/security/CVE-2021-1052, https://ubuntu.com/security/CVE-2021-1053, https://ubuntu.com/security/CVE-2021-1056