Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

Critical Code Execution Risk: Mageia 8 NVidia Driver Update MGASA-2022-0197

mageia
Calendar Grey May 22, 2022
Dist Mageia Esm H88
Mageia 2022-0197 upgrades the nvidia390 driver to resolve vital security vulnerabilities, protecting system reliability and efficiency.
Updated nvidia390 packages fix security vulnerabilities: NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer, where an unprivileged regular user on the net...

Summary

Updated nvidia390 packages fix security vulnerabilities:
NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer, where an unprivileged regular user on the network can cause an out-of-bounds write through a specially crafted shader, which may lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering. The scope of the impact may extend to other components (CVE‑2022‑28181).
NVIDIA GPU Display Driver contains a vulnerability in the ECC layer, where an unprivileged regular user can cause an out-of-bounds write, which may lead to denial of service and data tampering (CVE‑2022‑28185).
This driver also adds official support for kernel 5.17+ series.

References

- https://bugs.mageia.org/show_bug.cgi?id=30441

- https://www.nvidia.com/en-us/drivers/details/188601/

- https://nvidia.custhelp.com/app/answers/detail/a_id/5353

- https://www.cve.org/CVERecord?id=CVE-CVE%E2%80%912022%E2%80%9128181

- https://www.cve.org/CVERecord?id=CVE-CVE%E2%80%912022%E2%80%9128185

Topics%20covered

Topics Covered

security advisory denial of service code execution data tampering Mageia Nvidia driver

Resolution

SRPMS

- 8/nonfree/nvidia390-390.151-1.mga8.nonfree

Severity
critical
Lowest
Low
Medium
High
Critical

Publication date: 22 May 2022
URL: https://advisories.mageia.org/MGASA-2022-0197.html
Type: security
CVE: CVE‑2022‑28181, CVE‑2022‑28185

Topics%20covered

Topics Covered

security advisory denial of service code execution data tampering Mageia Nvidia driver

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here