Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 438
Alerts This Week
Warning Icon 1 438

Ubuntu 20.10 USN-4689-3 Critical: NVIDIA Driver Denial Of Service

ubuntu
Calendar Grey January 20, 2021
Dist Ubuntu Esm H88
Numerous vulnerabilities in NVIDIA GPU drivers have been patched for Ubuntu versions 20.10, 20.04 LTS, and 18.04 LTS.
Several security issues were fixed in NVIDIA graphics drivers.

Summary

Several security issues were fixed in NVIDIA graphics drivers.

Software Description:

- nvidia-graphics-drivers-418-server: NVIDIA Server Driver

- nvidia-graphics-drivers-450-server: NVIDIA Server Driver

Details:

It was discovered that the NVIDIA GPU display driver for the Linux kernel

contained a vulnerability that allowed user-mode clients to access legacy

privileged APIs. A local attacker could use this to cause a denial of

service or escalate privileges. (CVE-2021-1052)

It was discovered that the NVIDIA GPU display driver for the Linux kernel

did not properly validate a pointer received from userspace in some

situations. A local attacker could use this to cause a denial of service.

(CVE-2021-1053)

Xinyuan Lyu discovered that the NVIDIA GPU display driver for the Linux

kernel did not properly restrict device-level GPU isolation. A local

attacker could use this to cause a denial of service or possibly expose

sensitive information. (CVE-2021-1056)

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 20.10:
  nvidia-dkms-418-server          418.181.07-0ubuntu0.20.10.1
  nvidia-dkms-440-server          450.102.04-0ubuntu0.20.10.1
  nvidia-dkms-450-server          450.102.04-0ubuntu0.20.10.1
  nvidia-kernel-common-418-server  418.181.07-0ubuntu0.20.10.1
  nvidia-kernel-common-440-server  450.102.04-0ubuntu0.20.10.1
  nvidia-kernel-common-450-server  450.102.04-0ubuntu0.20.10.1
  nvidia-kernel-source-418-server  418.181.07-0ubuntu0.20.10.1
  nvidia-kernel-source-440-server  450.102.04-0ubuntu0.20.10.1
  nvidia-kernel-source-450-server  450.102.04-0ubuntu0.20.10.1
  nvidia-utils-418-server         418.181.07-0ubuntu0.20.10.1
  nvidia-utils-440-server         450.102.04-0ubuntu0.20.10.1
  nvidia-utils-450-server         450.102.04-0ubuntu0.20.10.1
  xserver-xorg-video-nvidia-418-server  418.181.07-0ubuntu0.20.10.1
  xserver-xorg-video-nvidia-440-server  450.102.04-0ubuntu0.20.10.1
  xserver-xorg-video-nvidia-450-server  450.102.04-0ubuntu0.20.10.1

Ubuntu 20.04 LTS:
  nvidia-dkms-418-server          418.181.07-0ubuntu0.20.04.1
  nvidia-dkms-440-server          450.102.04-0ubuntu0.20.04.1
  nvidia-dkms-450-server          450.102.04-0ubuntu0.20.04.1
  nvidia-kernel-common-418-server  418.181.07-0ubuntu0.20.04.1
  nvidia-kernel-common-440-server  450.102.04-0ubuntu0.20.04.1
  nvidia-kernel-common-450-server  450.102.04-0ubuntu0.20.04.1
  nvidia-kernel-source-418-server  418.181.07-0ubuntu0.20.04.1
  nvidia-kernel-source-440-server  450.102.04-0ubuntu0.20.04.1
  nvidia-kernel-source-450-server  450.102.04-0ubuntu0.20.04.1
  nvidia-utils-418-server         418.181.07-0ubuntu0.20.04.1
  nvidia-utils-440-server         450.102.04-0ubuntu0.20.04.1
  nvidia-utils-450-server         450.102.04-0ubuntu0.20.04.1
  xserver-xorg-video-nvidia-418-server  418.181.07-0ubuntu0.20.04.1
  xserver-xorg-video-nvidia-440-server  450.102.04-0ubuntu0.20.04.1
  xserver-xorg-video-nvidia-450-server  450.102.04-0ubuntu0.20.04.1

Ubuntu 18.04 LTS:
  nvidia-dkms-418-server          418.181.07-0ubuntu0.18.04.1
  nvidia-dkms-440-server          450.102.04-0ubuntu0.18.04.1
  nvidia-dkms-450-server          450.102.04-0ubuntu0.18.04.1
  nvidia-kernel-common-418-server  418.181.07-0ubuntu0.18.04.1
  nvidia-kernel-common-440-server  450.102.04-0ubuntu0.18.04.1
  nvidia-kernel-common-450-server  450.102.04-0ubuntu0.18.04.1
  nvidia-kernel-source-418-server  418.181.07-0ubuntu0.18.04.1
  nvidia-kernel-source-440-server  450.102.04-0ubuntu0.18.04.1
  nvidia-kernel-source-450-server  450.102.04-0ubuntu0.18.04.1
  nvidia-utils-418-server         418.181.07-0ubuntu0.18.04.1
  nvidia-utils-440-server         450.102.04-0ubuntu0.18.04.1
  nvidia-utils-450-server         450.102.04-0ubuntu0.18.04.1
  xserver-xorg-video-nvidia-418-server  418.181.07-0ubuntu0.18.04.1
  xserver-xorg-video-nvidia-440-server  450.102.04-0ubuntu0.18.04.1
  xserver-xorg-video-nvidia-450-server  450.102.04-0ubuntu0.18.04.1

This update uses a new upstream release, which includes additional
bug fixes. After a standard system update you need to reboot your
computer to make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-4689-3

https://ubuntu.com/security/notices/USN-4689-1

CVE-2021-1052, CVE-2021-1053

Severity
critical
Lowest
Low
Medium
High
Critical

January 20, 2021

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.