PT-2021-30827 · Nvidia · Nvidia Gpu Display Driver For Linux

Published 2021-01-14 · Updated 2021-01-14

PT · AI

Name of the Vulnerable Software and Affected Versions: NVIDIA GPU Display Driver for Linux (affected versions not specified)

Description: The NVIDIA GPU Display Driver for Linux contains vulnerabilities in the kernel mode layer. These vulnerabilities may lead to denial of service, escalation of privileges, and information disclosure. Specifically, user-mode clients can access legacy privileged APIs, and there is improper validation of a user pointer. Additionally, the driver does not completely honor operating system file system permissions to provide GPU device-level isolation.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE€‘2021€‘1056

MGASA-2021-0026

MGASA-2021-0029

Affected Products

Nvidia Gpu Display Driver For Linux

References · 5

• https://advisories.mageia.org/MGASA-2021-0026.html · Security Note
• https://advisories.mageia.org/MGASA-2021-0029.html · Security Note
• https://bugs.mageia.org/show_bug.cgi?id=28063 · Note
• https://bugs.mageia.org/show_bug.cgi?id=28050 · Note
• https://nvidia.custhelp.com/app/answers/detail/a_id/5142/~/security-bulletin%3A-nvidia-gpu-display-driver---january-2021 · Note