Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 515
Alerts This Week
Warning Icon 1 515

Ubuntu 15.10 USN-2814-1 Moderate: NVIDIA Drivers Administrative Issue

ubuntu
Calendar Grey November 18, 2015
Scroller Ubuntu
Recent studies show NVIDIA's Ubuntu graphics drivers may expose systems to risks, allowing local threats to gain root access. Update your drivers to protect your system
NVIDIA graphics drivers could be made to run programs as an administrator.

Summary

NVIDIA graphics drivers could be made to run programs as an administrator.

Software Description:

- nvidia-graphics-drivers-304: NVIDIA binary X.Org driver

- nvidia-graphics-drivers-304-updates: NVIDIA binary X.Org driver

- nvidia-graphics-drivers-340: NVIDIA binary X.Org driver

- nvidia-graphics-drivers-340-updates: NVIDIA binary X.Org driver

- nvidia-graphics-drivers-352: NVIDIA binary X.Org driver

- nvidia-graphics-drivers-352-updates: NVIDIA binary X.Org driver

Details:

It was discovered that the NVIDIA graphics drivers incorrectly sanitized

user mode inputs. A local attacker could use this issue to possibly gain

root privileges.

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 15.10:
  nvidia-304                      304.131-0ubuntu0.15.10.1
  nvidia-304-updates              304.131-0ubuntu0.15.10.1
  nvidia-331                      340.96-0ubuntu0.15.10.1
  nvidia-331-updates              340.96-0ubuntu0.15.10.1
  nvidia-340                      340.96-0ubuntu0.15.10.1
  nvidia-340-updates              340.96-0ubuntu0.15.10.1
  nvidia-346                      352.63-0ubuntu0.15.10.1
  nvidia-346-updates              352.63-0ubuntu0.15.10.1
  nvidia-352                      352.63-0ubuntu0.15.10.1
  nvidia-352-updates              352.63-0ubuntu0.15.10.1

Ubuntu 15.04:
  nvidia-304                      304.131-0ubuntu0.15.04.1
  nvidia-304-updates              304.131-0ubuntu0.15.04.1
  nvidia-331                      340.96-0ubuntu0.15.04.1
  nvidia-331-updates              340.96-0ubuntu0.15.04.1
  nvidia-340                      340.96-0ubuntu0.15.04.1
  nvidia-340-updates              340.96-0ubuntu0.15.04.1
  nvidia-346                      352.63-0ubuntu0.15.04.1
  nvidia-346-updates              352.63-0ubuntu0.15.04.1
  nvidia-352                      352.63-0ubuntu0.15.04.1
  nvidia-352-updates              352.63-0ubuntu0.15.04.1

Ubuntu 14.04 LTS:
  nvidia-304                      304.131-0ubuntu0.14.04.1
  nvidia-304-updates              304.131-0ubuntu0.14.04.1
  nvidia-331                      340.96-0ubuntu0.14.04.1
  nvidia-331-updates              340.96-0ubuntu0.14.04.1
  nvidia-340                      340.96-0ubuntu0.14.04.1
  nvidia-340-updates              340.96-0ubuntu0.14.04.1
  nvidia-346                      352.63-0ubuntu0.14.04.1
  nvidia-346-updates              352.63-0ubuntu0.14.04.1
  nvidia-352                      352.63-0ubuntu0.14.04.1
  nvidia-352-updates              352.63-0ubuntu0.14.04.1

Ubuntu 12.04 LTS:
  nvidia-304                      304.131-0ubuntu0.12.04.1
  nvidia-304-updates              304.131-0ubuntu0.12.04.1
  nvidia-331-updates              340.96-0ubuntu0.12.04.1
  nvidia-340                      340.96-0ubuntu0.12.04.1
  nvidia-340-updates              340.96-0ubuntu0.12.04.1

After a standard system update you need to reboot your computer to make
all the necessary changes.

References

https://ubuntu.com/security/notices/USN-2814-1

CVE-2015-7869

Severity
important
Lowest
Low
Medium
High
Critical

November 18, 2015

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.