Advisories » MGASA-2021-0026

Updated nvidia390 packages fix security vulnerabilities

Publication date: 14 Jan 2021
Modification date: 14 Jan 2021
Type: security
Affected Mageia releases : 7
CVE: CVE‑2021‑1052 , CVE‑2021‑1053 , CVE‑2021‑1056

Description

NVIDIA GPU Display Driver Linux contains a vulnerability in the kernel mode
layer (nvidia.ko) IOCTL in which user-mode clients can access legacy
privileged APIs, which may lead to denial of service, escalation of privileges,
and information disclosure (CVE‑2021‑1052).

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel
mode layer (nvidia.ko) IOCTL in which improper validation of a user pointer
may lead to denial of service (CVE‑2021‑1053).

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel
mode layer (nvidia.ko) in which it does not completely honor operating system
file system permissions to provide GPU device-level isolation, which may
lead to denial of service or information disclosure (CVE‑2021‑1056).
                

References

SRPMS

7/nonfree