PT-2021-30907 · Nvidia · Nvidia Gpu Display Driver For Linux

Published 2021-01-14 · Updated 2021-01-14

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions: NVIDIA GPU Display Driver for Linux (affected versions not specified)

Description: The issue concerns the kernel mode layer of the NVIDIA GPU Display Driver for Linux, where user-mode clients can access legacy privileged APIs, potentially leading to denial of service, escalation of privileges, and information disclosure. Additionally, improper validation of a user pointer may cause denial of service. The driver also fails to completely honor operating system file system permissions, which may result in denial of service or information disclosure.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE‑2021‑1052

MGASA-2021-0026

MGASA-2021-0029

Affected Products

Nvidia Gpu Display Driver For Linux

References · 7

• https://osv.dev/vulnerability/MGASA-2021-0029 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2021-0029.html · Security Note
• https://advisories.mageia.org/MGASA-2021-0026.html · Security Note
• https://osv.dev/vulnerability/MGASA-2021-0026 · Vendor Advisory
• https://nvidia.custhelp.com/app/answers/detail/a_id/5142/~/security-bulletin%3A-nvidia-gpu-display-driver---january-2021 · Note
• https://bugs.mageia.org/show_bug.cgi?id=28063 · Note
• https://bugs.mageia.org/show_bug.cgi?id=28050 · Note