Nvidia GPU Display Driver for Linux 信息泄露漏洞

admin

0
文章

0
评论

2023-12-01 17:09:55 Ali_nvd 来源：ZONE.CI 全球网 0 阅读模式

低危 Nvidia GPU Display Driver for Linux 信息泄露漏洞

CVE编号

CVE-2021-1056

利用情况

EXP 已公开

补丁情况

官方补丁

披露时间

2021-01-08

漏洞描述

NVIDIA GPU Display Driver for Linux, all versions, contains a vulnerability in the kernel mode layer (nvidia.ko) in which it does not completely honor operating system file system permissions to provide GPU device-level isolation, which may lead to denial of service or information disclosure.

解决建议

建议您更新当前系统或软件至最新版，完成漏洞的修复。

参考链接
https://lists.debian.org/debian-lts-announce/2022/01/msg00013.html
https://nvidia.custhelp.com/app/answers/detail/a_id/5142
https://security.gentoo.org/glsa/202310-02

受影响软件情况

1
#	类型	厂商	产品	版本	影响面
	运行在以下环境
	应用	nvidia	gpu_driver	*	From (including) 390	Up to (excluding) 390.141
	运行在以下环境
	应用	nvidia	gpu_driver	*	From (including) 450	Up to (excluding) 450.102.04
	运行在以下环境
	应用	nvidia	gpu_driver	*	From (including) 460	Up to (excluding) 460.32.03
	运行在以下环境
	系统	debian_10	nvidia-graphics-drivers	*		Up to (excluding) 418.181.07-1
	运行在以下环境
	系统	debian_11	nvidia-graphics-drivers	*		Up to (excluding) 460.32.03-1
	运行在以下环境
	系统	debian_12	nvidia-graphics-drivers	*		Up to (excluding) 460.32.03-1
	运行在以下环境
	系统	debian_9	nvidia-graphics-drivers	*		Up to (excluding) 390.144-1~deb9u1
	运行在以下环境
	系统	debian_sid	nvidia-graphics-drivers	*		Up to (excluding) 460.32.03-1
	运行在以下环境
	系统	linux	linux_kernel	-	-
	运行在以下环境
	系统	ubuntu_18.04	nvidia-graphics-drivers-450-server	*		Up to (excluding) 390.141-0ubuntu0.18.04.1
	运行在以下环境
	系统	ubuntu_18.04.5_lts	nvidia-graphics-drivers-390	*		Up to (excluding) 390.141-0ubuntu0.18.04.1
	运行在以下环境
	系统	ubuntu_20.04	nvidia-graphics-drivers-450-server	*		Up to (excluding) 418.181.07-0ubuntu0.20.04.1