Mageia 7 MGASA-2021-0029 Moderate: NVIDIA Driver Escalation Risks
mageia
January 14, 2021
NVIDIA GPU Display Driver Linux contains a vulnerability in the kernel mode layer (nvidia.ko) IOCTL in which user-mode clients can access legacy privileged APIs, which may lead to ...
Summary
NVIDIA GPU Display Driver Linux contains a vulnerability in the kernel mode
layer (nvidia.ko) IOCTL in which user-mode clients can access legacy
privileged APIs, which may lead to denial of service, escalation of privileges,
and information disclosure (CVE‑2021‑1052).
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel
mode layer (nvidia.ko) IOCTL in which improper validation of a user pointer
may lead to denial of service (CVE‑2021‑1053).
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel
mode layer (nvidia.ko) in which it does not completely honor operating system
file system permissions to provide GPU device-level isolation, which may
lead to denial of service or information disclosure (CVE‑2021‑1056).
References
- https://bugs.mageia.org/show_bug.cgi?id=28063
- https://nvidia.custhelp.com/app/answers/detail/a_id/5142/~/security-bulletin%3A-nvidia-gpu-display-driver---january-2021
- https://www.cve.org/CVERecord?id=CVE%E2%80%912021%E2%80%911052
- https://www.cve.org/CVERecord?id=CVE%E2%80%912021%E2%80%911053
- https://www.cve.org/CVERecord?id=CVE%E2%80%912021%E2%80%911056
Resolution
SRPMS
- 7/core/ldetect-lst-0.6.9.1-1.mga7
- 7/nonfree/nvidia-current-460.32.03-1.mga7.nonfree
PREVIOUS
NEXT
Publication date: 14 Jan 2021
URL: https://advisories.mageia.org/MGASA-2021-0029.html
Type: security
CVE: CVE‑2021‑1052,
CVE‑2021‑1053,
CVE‑2021‑1056
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!