USN-2747-1: NVIDIA graphics drivers vulnerability
28 September 2015
NVIDIA graphics drivers could be made to run programs as an administrator.
Releases
Packages
- jockey - user interface and desktop integration for driver management
- nvidia-graphics-drivers-304 - NVIDIA binary X.Org driver
- nvidia-graphics-drivers-304-updates - NVIDIA binary X.Org driver
- nvidia-graphics-drivers-340 - NVIDIA binary X.Org driver
- nvidia-graphics-drivers-340-updates - NVIDIA binary X.Org driver
- nvidia-graphics-drivers-346 - NVIDIA binary X.Org driver
- nvidia-graphics-drivers-346-updates - NVIDIA binary X.Org driver
Details
Dario Weisser discovered that the NVIDIA graphics drivers incorrectly
handled certain IOCTL writes. A local attacker could use this issue to
possibly gain root privileges.
Update instructions
The problem can be corrected by updating your system to the following package versions:
Ubuntu 15.04
-
nvidia-304
-
304.128-0ubuntu0.1
-
nvidia-304-updates
-
304.128-0ubuntu0.1
-
nvidia-340
-
340.93-0ubuntu0.1
-
nvidia-340-updates
-
340.93-0ubuntu0.1
-
nvidia-346
-
346.96-0ubuntu0.1
-
nvidia-346-updates
-
346.96-0ubuntu0.1
Ubuntu 14.04
-
nvidia-304
-
304.128-0ubuntu0.0.1
-
nvidia-304-updates
-
304.128-0ubuntu0.0.1
-
nvidia-340
-
340.93-0ubuntu0.0.1
-
nvidia-340-updates
-
340.93-0ubuntu0.0.1
-
nvidia-346
-
346.96-0ubuntu0.0.1
-
nvidia-346-updates
-
346.96-0ubuntu0.0.1
Ubuntu 12.04
-
jockey-common
-
0.9.7-0ubuntu7.16
-
nvidia-304
-
304.128-0ubuntu0.0.0.1
-
nvidia-304-updates
-
304.128-0ubuntu0.0.0.1
-
nvidia-340
-
340.93-0ubuntu0.0.0.1
-
nvidia-340-updates
-
340.93-0ubuntu0.0.0.1
After a standard system update you need to reboot your computer to make
all the necessary changes.