Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Mageia 7: MGASA-2021-0026 Critical: NVIDIA Driver Escalation Risk

mageia
Calendar Grey January 14, 2021
Dist Mageia Esm H88
The Mageia NVIDIA GPU Display Driver encounters several challenges. The recent update resolves access and permission-related issues. Find more information within.
NVIDIA GPU Display Driver Linux contains a vulnerability in the kernel mode layer (nvidia.ko) IOCTL in which user-mode clients can access legacy privileged APIs, which may lead to ...

Summary

NVIDIA GPU Display Driver Linux contains a vulnerability in the kernel mode layer (nvidia.ko) IOCTL in which user-mode clients can access legacy privileged APIs, which may lead to denial of service, escalation of privileges, and information disclosure (CVE‑2021‑1052).
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko) IOCTL in which improper validation of a user pointer may lead to denial of service (CVE‑2021‑1053).
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko) in which it does not completely honor operating system file system permissions to provide GPU device-level isolation, which may lead to denial of service or information disclosure (CVE‑2021‑1056).

References

- https://bugs.mageia.org/show_bug.cgi?id=28050

- https://nvidia.custhelp.com/app/answers/detail/a_id/5142/~/security-bulletin%3A-nvidia-gpu-display-driver---january-2021

- https://www.cve.org/CVERecord?id=CVE%E2%80%912021%E2%80%911052

- https://www.cve.org/CVERecord?id=CVE%E2%80%912021%E2%80%911053

- https://www.cve.org/CVERecord?id=CVE%E2%80%912021%E2%80%911056

Topics%20covered

Topics Covered

security advisory denial of service privilege escalation access control information disclosure nvidia driver escalation risk NVIDIA driver Mageia mageia

Resolution

SRPMS

- 7/nonfree/nvidia390-390.141-1.mga7.nonfree

Severity
critical
Lowest
Low
Medium
High
Critical

Publication date: 14 Jan 2021
URL: https://advisories.mageia.org/MGASA-2021-0026.html
Type: security
CVE: CVE‑2021‑1052, CVE‑2021‑1053, CVE‑2021‑1056

Topics%20covered

Topics Covered

security advisory denial of service privilege escalation access control information disclosure nvidia driver escalation risk NVIDIA driver Mageia mageia

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here