Stay Secure with the Latest Linux Advisories

security advisorydenial of serviceprivilege escalation

Mageia 7 MGASA-2021-0029 Moderate: NVIDIA Driver Escalation Risks

NVIDIA GPU Display Driver Linux contains a vulnerability in the kernel mode layer (nvidia.ko) IOCTL in which user-mode clients can access legacy privileged APIs, which may lead to denial of service, escalation of privileges, and information disclosure (CVE‑2021‑1052). . MGASA-2021-0029 - Updated nvidia-current packages fix security vulnerabilities Publication date: 14 Jan 2021 URL: https://advisories.mageia.org/MGASA-2021-0029.html Type: security Affected Mageia releases: 7 CVE: CVE‑2021‑1052, CVE‑2021‑1053, CVE‑2021‑1056 NVIDIA GPU Display Driver Linux contains a vulnerability in the kernel mode layer (nvidia.ko) IOCTL in which user-mode clients can access legacy privileged APIs, which may lead to denial of service, escalation of privileges, and information disclosure (CVE‑2021‑1052). NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko) IOCTL in which improper validation of a user pointer may lead to denial of service (CVE‑2021‑1053). NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko) in which it does not completely honor operating system file system permissions to provide GPU device-level isolation, which may lead to denial of service or information disclosure (CVE‑2021‑1056). References: - https://bugs.mageia.org/show_bug.cgi?id=28063 - https://nvidia.custhelp.com/app/answers/detail/a_id/5142/~/security-bulletin%3A-nvidia-gpu-display-driver---january-2021 - https://www.cve.org/CVERecord?id=CVE%E2%80%912021%E2%80%911052 - https://www.cve.org/CVERecord?id=CVE%E2%80%912021%E2%80%911053 - https://www.cve.org/CVERecord?id=CVE%E2%80%912021%E2%80%911056 SRPMS: - 7/core/ldetect-lst-0.6.9.1-1.mga7 - 7/nonfree/nvidia-current-460.32.03-1.mga7.nonfree . MGASA-2021-0030 tackles vulnerabilities within the Intel chipset firmware, enhancing overall device safety and resilience.. NVIDIA Driver Threats, Mageia 7 Security, GPU Security Advisory, Driver Update Security, Privilege EscalationFix. . LinuxSecurity.com Team

Jan 14, 2021 Mageia