[USN-4404-1] NVIDIA graphics drivers vulnerabilities
steve.beattie at canonical.com
Thu Jun 25 21:09:35 UTC 2020
Ubuntu Security Notice USN-4404-1
June 25, 2020
nvidia-graphics-drivers-390, nvidia-graphics-drivers-440 vulnerabilities
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 20.04 LTS
- Ubuntu 19.10
- Ubuntu 18.04 LTS
Several security issues were fixed in NVIDIA graphics drivers.
- nvidia-graphics-drivers-390: NVIDIA binary X.Org driver
- nvidia-graphics-drivers-440: NVIDIA binary X.Org driver
Thomas E. Carroll discovered that the NVIDIA Cuda grpahics driver did not
properly perform access control when performing IPC. An attacker could use
this to cause a denial of service or possibly execute arbitrary code.
It was discovered that the UVM driver in the NVIDIA graphics driver
contained a race condition. A local attacker could use this to cause a
denial of service. (CVE-2020-5967)
It was discovered that the NVIDIA virtual GPU guest drivers contained
an unspecified vulnerability that could potentially lead to privileged
operation execution. An attacker could use this to cause a denial of
The problem can be corrected by updating your system to the following
Ubuntu 20.04 LTS:
Ubuntu 18.04 LTS:
After a standard system update you need to reboot your computer to make
all the necessary changes.
CVE-2020-5963, CVE-2020-5967, CVE-2020-5973
-------------- next part --------------
A non-text attachment was scrubbed...
Size: 833 bytes
Desc: not available
More information about the ubuntu-security-announce