Summary
It was discovered that the NVIDIA GPU display driver for the Linux kernel
contained a vulnerability that allowed user-mode clients to access legacy
privileged APIs. A local attacker could use this to cause a denial of
service or escalate privileges. (CVE-2021-1052)
It was discovered that the NVIDIA GPU display driver for the Linux kernel
did not properly validate a pointer received from userspace in some
situations. A local attacker could use this to cause a denial of service.
(CVE-2021-1053)
Xinyuan Lyu discovered that the NVIDIA GPU display driver for the Linux
kernel did not properly restrict device-level GPU isolation. A local
attacker could use this to cause a denial of service or possibly expose
sensitive information. (CVE-2021-1056)
Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | nvidia-graphics-drivers-390 | 390.141-0ubuntu0.18.04.1 |
| Ubuntu · 18.04 LTS 18.04:LTS | nvidia-graphics-drivers-450 | 450.102.04-0ubuntu0.18.04.1 |
| Ubuntu · 18.04 LTS 18.04:LTS | nvidia-graphics-drivers-460 | 460.32.03-0ubuntu0.18.04.1 |
| Ubuntu · 20.04 LTS 20.04:LTS | nvidia-graphics-drivers-390 | 390.141-0ubuntu0.20.04.1 |
| Ubuntu · 20.04 LTS 20.04:LTS | nvidia-graphics-drivers-450 | 450.102.04-0ubuntu0.20.04.1 |
| Ubuntu · 20.04 LTS 20.04:LTS | nvidia-graphics-drivers-460 | 460.32.03-0ubuntu0.20.04.1 |
Vulnerabilities 3
-
Unscored —
NVIDIA GPU Display Driver for Windows and Linux, all versions, contains a vulnerability in the kernel mode layer (nvldd…
-
Unscored —
NVIDIA GPU Display Driver for Windows and Linux, all versions, contains a vulnerability in the kernel mode layer (nvldd…
-
Unscored —CVE-2021-1056 Public exploit
NVIDIA GPU Display Driver for Linux, all versions, contains a vulnerability in the kernel mode layer (nvidia.ko) in whi…