USN-4689-3

Dashboard / Vulnerabilities / USN-4689-3

USN-4689-3

Summary: nvidia-graphics-drivers-418-server, nvidia-graphics-drivers-450-server vulnerabilities

Details: It was discovered that the NVIDIA GPU display driver for the Linux kernel contained a vulnerability that allowed user-mode clients to access legacy privileged APIs. A local attacker could use this to cause a denial of service or escalate privileges. (CVE-2021-1052) It was discovered that the NVIDIA GPU display driver for the Linux kernel did not properly validate a pointer received from userspace in some situations. A local attacker could use this to cause a denial of service. (CVE-2021-1053) Xinyuan Lyu discovered that the NVIDIA GPU display driver for the Linux kernel did not properly restrict device-level GPU isolation. A local attacker could use this to cause a denial of service or possibly expose sensitive information. (CVE-2021-1056)

References: https://ubuntu.com/security/notices/USN-4689-3, https://ubuntu.com/security/CVE-2021-1052, https://ubuntu.com/security/CVE-2021-1053