Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 542
Alerts This Week
Warning Icon 1 542

Ubuntu 18.04 LTS: Critical Security Notice USN-3921-1 NVIDIA Driver

ubuntu
Calendar Grey November 3, 2016
Scroller Ubuntu
Recent vulnerabilities in NVIDIA graphics drivers on Ubuntu enable local applications to execute with elevated permissions. Immediate update needed.
NVIDIA graphics drivers could be made to run programs as an administrator.

Summary

NVIDIA graphics drivers could be made to run programs as an administrator.

Software Description:

- nvidia-graphics-drivers-304: NVIDIA binary X.Org driver

- nvidia-graphics-drivers-340: NVIDIA binary X.Org driver

- nvidia-graphics-drivers-367: NVIDIA binary X.Org driver

Details:

It was discovered that the NVIDIA graphics drivers incorrectly sanitized

user mode inputs. A local attacker could use this issue to possibly gain

root privileges.

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 16.04 LTS:
  nvidia-304                      304.132-0ubuntu0.16.04.2
  nvidia-304-updates              304.132-0ubuntu0.16.04.2
  nvidia-331                      340.98-0ubuntu0.16.04.1
  nvidia-331-updates              340.98-0ubuntu0.16.04.1
  nvidia-340                      340.98-0ubuntu0.16.04.1
  nvidia-340-updates              340.98-0ubuntu0.16.04.1
  nvidia-361                      367.57-0ubuntu0.16.04.1
  nvidia-367                      367.57-0ubuntu0.16.04.1
  nvidia-current                  304.132-0ubuntu0.16.04.2

Ubuntu 14.04 LTS:
  nvidia-304                      304.132-0ubuntu0.14.04.2
  nvidia-304-updates              304.132-0ubuntu0.14.04.2
  nvidia-331                      340.98-0ubuntu0.14.04.1
  nvidia-331-updates              340.98-0ubuntu0.14.04.1
  nvidia-340                      340.98-0ubuntu0.14.04.1
  nvidia-340-updates              340.98-0ubuntu0.14.04.1
  nvidia-352                      367.57-0ubuntu0.14.04.1
  nvidia-352-updates              367.57-0ubuntu0.14.04.1
  nvidia-367                      367.57-0ubuntu0.14.04.1
  nvidia-current                  304.132-0ubuntu0.14.04.2

Ubuntu 12.04 LTS:
  nvidia-304                      304.132-0ubuntu0.12.04.1
  nvidia-304-updates              304.132-0ubuntu0.12.04.1
  nvidia-331                      340.98-0ubuntu0.12.04.1
  nvidia-331-updates              340.98-0ubuntu0.12.04.1
  nvidia-340                      340.98-0ubuntu0.12.04.1
  nvidia-340-updates              340.98-0ubuntu0.12.04.1
  nvidia-current                  304.132-0ubuntu0.12.04.1

After a standard system update you need to reboot your computer to make
all the necessary changes.

References

https://ubuntu.com/security/notices/USN-3122-1

CVE-2016-7382, CVE-2016-7389

Severity
critical
Lowest
Low
Medium
High
Critical

November 03, 2016

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.