Debian dla-4752 : firmware-nvidia-gsp - security update

#%NASL_MIN_LEVEL 80900
#
# (C) Tenable, Inc.
#
# The descriptive text and package checks in this plugin were
# extracted from Debian Security Advisory dla-4752. The text
# itself is copyright (C) Software in the Public Interest, Inc.
#

include('compat.inc');

if (description)
{
  script_id(339047);
  script_version("1.1");
  script_set_attribute(attribute:"plugin_modification_date", value:"2026/08/24");

  script_cve_id(
    "CVE-2022-21813",
    "CVE-2022-21814",
    "CVE-2022-28181",
    "CVE-2022-28183",
    "CVE-2022-28184",
    "CVE-2022-28185",
    "CVE-2022-28191",
    "CVE-2022-28192",
    "CVE-2022-31607",
    "CVE-2022-31608",
    "CVE-2022-31615",
    "CVE-2022-34670",
    "CVE-2022-34674",
    "CVE-2022-34675",
    "CVE-2022-34677",
    "CVE-2022-34679",
    "CVE-2022-34680",
    "CVE-2022-34682",
    "CVE-2022-34684",
    "CVE-2022-42254",
    "CVE-2022-42255",
    "CVE-2022-42256",
    "CVE-2022-42257",
    "CVE-2022-42258",
    "CVE-2022-42259",
    "CVE-2022-42260",
    "CVE-2022-42261",
    "CVE-2022-42262",
    "CVE-2022-42263",
    "CVE-2022-42264",
    "CVE-2022-42265",
    "CVE-2023-0180",
    "CVE-2023-0183",
    "CVE-2023-0184",
    "CVE-2023-0185",
    "CVE-2023-0187",
    "CVE-2023-0188",
    "CVE-2023-0189",
    "CVE-2023-0190",
    "CVE-2023-0191",
    "CVE-2023-0194",
    "CVE-2023-0195",
    "CVE-2023-0198",
    "CVE-2023-0199",
    "CVE-2023-25515",
    "CVE-2023-25516",
    "CVE-2023-31022",
    "CVE-2024-0074",
    "CVE-2024-0075",
    "CVE-2024-0078",
    "CVE-2024-0090",
    "CVE-2024-0092",
    "CVE-2024-0126",
    "CVE-2024-0131",
    "CVE-2024-0147",
    "CVE-2024-0149",
    "CVE-2024-0150",
    "CVE-2025-23244",
    "CVE-2025-23279",
    "CVE-2025-23280",
    "CVE-2025-23282",
    "CVE-2025-23286",
    "CVE-2025-23300",
    "CVE-2025-23330",
    "CVE-2025-23332",
    "CVE-2025-23345",
    "CVE-2025-33219"
  );

  script_name(english:"Debian dla-4752 : firmware-nvidia-gsp - security update");

  script_set_attribute(attribute:"synopsis", value:
"The remote Debian host is missing one or more security-related updates.");
  script_set_attribute(attribute:"description", value:
"The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the
dla-4752 advisory.

    -------------------------------------------------------------------------
    Debian LTS Advisory DLA-4752-1                [email protected]
    https://www.debian.org/lts/security/                         Tobias Frost
    August 24, 2026                               https://wiki.debian.org/LTS
    -------------------------------------------------------------------------

    Package        : nvidia-graphics-drivers
    Version        : 535.309.01-0+deb11u1
    CVE ID         : CVE-2022-21813 CVE-2022-21814 CVE-2022-28181 CVE-2022-28183
                     CVE-2022-28184 CVE-2022-28185 CVE-2022-28191 CVE-2022-28192
                     CVE-2022-31607 CVE-2022-31608 CVE-2022-31615 CVE-2022-34670
                     CVE-2022-34674 CVE-2022-34675 CVE-2022-34677 CVE-2022-34679
                     CVE-2022-34680 CVE-2022-34682 CVE-2022-34684 CVE-2022-42254
                     CVE-2022-42255 CVE-2022-42256 CVE-2022-42257 CVE-2022-42258
                     CVE-2022-42259 CVE-2022-42260 CVE-2022-42261 CVE-2022-42262
                     CVE-2022-42263 CVE-2022-42264 CVE-2022-42265 CVE-2023-0180
                     CVE-2023-0183 CVE-2023-0184 CVE-2023-0185 CVE-2023-0187
                     CVE-2023-0188 CVE-2023-0189 CVE-2023-0190 CVE-2023-0191
                     CVE-2023-0194 CVE-2023-0195 CVE-2023-0198 CVE-2023-0199
                     CVE-2023-25515 CVE-2023-25516 CVE-2023-31022 CVE-2024-0074
                     CVE-2024-0075 CVE-2024-0078 CVE-2024-0090 CVE-2024-0092
                     CVE-2024-0126 CVE-2024-0131 CVE-2024-0147 CVE-2024-0149
                     CVE-2024-0150 CVE-2025-23244 CVE-2025-23279 CVE-2025-23280
                     CVE-2025-23282 CVE-2025-23286 CVE-2025-23300 CVE-2025-23330
                     CVE-2025-23332 CVE-2025-23345 CVE-2025-33219
    Debian Bug     : 1004847 1011140 1012514 1012713 1012815 1013462 1014283 1016614 1016621 1020761 1021958
    1022165 1025279 1025883 1027790 1028259 1028496 1030336 1030981 1031080 1031185 1032647 1033418 1033602
    1033774 1037468 1038006 1039678 1041991 1042081 1050809 1050935 1053562 1055136 1055503 1056384 1056557
    1057078 1058081 1059339 1059581 1059590 1061269 1061597 1062281 1062932 1063363 1063881 1063910 1064194
    1064983 1072142 1072722 1072792 1073744 1074350 1077841 1078424 1078425 1078462 1078489 1081314 1082725
    1084844 1085968 1089513 1089811 1092957 1093246 1093908 1094903 1095032 1104068 1109907 1118679

    The update of nvidia-graphics-drivers for Debian 11 (bullseye) updates the
    NVIDIA driver from version 470.256.02 to 535.309.01. The update addresses
    numerous security vulnerabilities affecting the NVIDIA driver stack.

    Alongside the driver update, the auxiliary packages nvidia-settings and
    nvidia-modprobe have also been updated to 535.309.01-0+deb11u1, as these
    are required by the newer driver.

    For the detailed security status of nvidia-graphics-drivers and details about
    the vulnerabilities, please refer to
    https://security-tracker.debian.org/tracker/nvidia-graphics-drivers

    For Debian 11 bullseye, these problems have been fixed in version
    535.309.01-0+deb11u1.

    We recommend that you upgrade your nvidia-graphics-drivers packages.

    For the detailed security status of nvidia-graphics-drivers please refer to
    its security tracker page at:
    https://security-tracker.debian.org/tracker/nvidia-graphics-drivers

    Further information about Debian LTS security advisories, how to apply
    these updates to your system and frequently asked questions can be
    found at: https://wiki.debian.org/LTS
    Attachment:
    signature.asc
    Description: PGP signature

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version
number.");
  # https://security-tracker.debian.org/tracker/source-package/nvidia-graphics-drivers
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?f8601151");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2022-21813");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2022-21814");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2022-28181");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2022-28183");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2022-28184");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2022-28185");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2022-28191");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2022-28192");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2022-31607");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2022-31608");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2022-31615");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2022-34670");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2022-34674");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2022-34675");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2022-34677");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2022-34679");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2022-34680");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2022-34682");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2022-34684");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2022-42254");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2022-42255");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2022-42256");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2022-42257");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2022-42258");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2022-42259");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2022-42260");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2022-42261");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2022-42262");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2022-42263");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2022-42264");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2022-42265");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2023-0180");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2023-0183");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2023-0184");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2023-0185");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2023-0187");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2023-0188");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2023-0189");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2023-0190");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2023-0191");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2023-0194");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2023-0195");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2023-0198");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2023-0199");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2023-25515");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2023-25516");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2023-31022");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2024-0074");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2024-0075");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2024-0078");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2024-0090");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2024-0092");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2024-0126");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2024-0131");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2024-0147");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2024-0149");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2024-0150");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2025-23244");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2025-23279");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2025-23280");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2025-23282");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2025-23286");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2025-23300");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2025-23330");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2025-23332");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2025-23345");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2025-33219");
  script_set_attribute(attribute:"see_also", value:"https://packages.debian.org/source/bullseye/nvidia-graphics-drivers");
  script_set_attribute(attribute:"solution", value:
"Upgrade the firmware-nvidia-gsp packages.");
  script_set_cvss_base_vector("CVSS2#AV:L/AC:M/Au:N/C:C/I:C/A:C");
  script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2022-28181");

  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"false");

  script_set_attribute(attribute:"vuln_publication_date", value:"2022/02/07");
  script_set_attribute(attribute:"patch_publication_date", value:"2026/08/24");
  script_set_attribute(attribute:"plugin_publication_date", value:"2026/08/24");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firmware-nvidia-gsp");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libcuda1");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libcudadebugger1");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libegl-nvidia0");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libgl1-nvidia-glvnd-glx");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libgles-nvidia1");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libgles-nvidia2");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libglx-nvidia0");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libnvcuvid1");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libnvidia-allocator1");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libnvidia-api1");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libnvidia-cfg1");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libnvidia-eglcore");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libnvidia-encode1");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libnvidia-fbc1");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libnvidia-glcore");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libnvidia-glvkspirv");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libnvidia-ml1");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libnvidia-ngx1");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libnvidia-nvvm4");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libnvidia-opticalflow1");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libnvidia-pkcs11-openssl3");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libnvidia-ptxjitcompiler1");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libnvidia-rtcore");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libnvoptix1");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:nvidia-alternative");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:nvidia-cuda-mps");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:nvidia-detect");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:nvidia-driver");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:nvidia-driver-bin");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:nvidia-driver-full");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:nvidia-driver-libs");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:nvidia-egl-common");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:nvidia-egl-icd");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:nvidia-kernel-dkms");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:nvidia-kernel-source");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:nvidia-kernel-support");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:nvidia-legacy-check");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:nvidia-libopencl1");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:nvidia-opencl-common");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:nvidia-opencl-icd");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:nvidia-powerd");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:nvidia-smi");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:nvidia-suspend-common");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:nvidia-vdpau-driver");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:nvidia-vulkan-common");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:nvidia-vulkan-icd");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:xserver-xorg-video-nvidia");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:debian:debian_linux:11.0");
  script_set_attribute(attribute:"generated_plugin", value:"current");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Debian Local Security Checks");

  script_copyright(english:"This script is Copyright (C) 2026 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("ssh_get_info.nasl");
  script_require_keys("Host/local_checks_enabled", "Host/Debian/release", "Host/Debian/dpkg-l");

  exit(0);
}

include('debian_package.inc');

if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
if (!get_kb_item("Host/Debian/dpkg-l")) audit(AUDIT_PACKAGE_LIST_MISSING);

var debian_release = get_kb_item('Host/Debian/release');
if ( isnull(debian_release) ) audit(AUDIT_OS_NOT, 'Debian');
debian_release = chomp(debian_release);
if (! preg(pattern:"^(11)\.[0-9]+", string:debian_release)) audit(AUDIT_OS_NOT, 'Debian 11.0', 'Debian ' + debian_release);
var cpu = get_kb_item('Host/cpu');
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if ('x86_64' >!< cpu && cpu !~ "^i[3-6]86$" && 'aarch64' >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, 'Debian', cpu);

var pkgs = [
    {'release': '11.0', 'prefix': 'firmware-nvidia-gsp', 'reference': '535.309.01-0+deb11u1'},
    {'release': '11.0', 'prefix': 'libcuda1', 'reference': '535.309.01-0+deb11u1'},
    {'release': '11.0', 'prefix': 'libcudadebugger1', 'reference': '535.309.01-0+deb11u1'},
    {'release': '11.0', 'prefix': 'libegl-nvidia0', 'reference': '535.309.01-0+deb11u1'},
    {'release': '11.0', 'prefix': 'libgl1-nvidia-glvnd-glx', 'reference': '535.309.01-0+deb11u1'},
    {'release': '11.0', 'prefix': 'libgles-nvidia1', 'reference': '535.309.01-0+deb11u1'},
    {'release': '11.0', 'prefix': 'libgles-nvidia2', 'reference': '535.309.01-0+deb11u1'},
    {'release': '11.0', 'prefix': 'libglx-nvidia0', 'reference': '535.309.01-0+deb11u1'},
    {'release': '11.0', 'prefix': 'libnvcuvid1', 'reference': '535.309.01-0+deb11u1'},
    {'release': '11.0', 'prefix': 'libnvidia-allocator1', 'reference': '535.309.01-0+deb11u1'},
    {'release': '11.0', 'prefix': 'libnvidia-api1', 'reference': '535.309.01-0+deb11u1'},
    {'release': '11.0', 'prefix': 'libnvidia-cfg1', 'reference': '535.309.01-0+deb11u1'},
    {'release': '11.0', 'prefix': 'libnvidia-eglcore', 'reference': '535.309.01-0+deb11u1'},
    {'release': '11.0', 'prefix': 'libnvidia-encode1', 'reference': '535.309.01-0+deb11u1'},
    {'release': '11.0', 'prefix': 'libnvidia-fbc1', 'reference': '535.309.01-0+deb11u1'},
    {'release': '11.0', 'prefix': 'libnvidia-glcore', 'reference': '535.309.01-0+deb11u1'},
    {'release': '11.0', 'prefix': 'libnvidia-glvkspirv', 'reference': '535.309.01-0+deb11u1'},
    {'release': '11.0', 'prefix': 'libnvidia-ml1', 'reference': '535.309.01-0+deb11u1'},
    {'release': '11.0', 'prefix': 'libnvidia-ngx1', 'reference': '535.309.01-0+deb11u1'},
    {'release': '11.0', 'prefix': 'libnvidia-nvvm4', 'reference': '535.309.01-0+deb11u1'},
    {'release': '11.0', 'prefix': 'libnvidia-opticalflow1', 'reference': '535.309.01-0+deb11u1'},
    {'release': '11.0', 'prefix': 'libnvidia-pkcs11-openssl3', 'reference': '535.309.01-0+deb11u1'},
    {'release': '11.0', 'prefix': 'libnvidia-ptxjitcompiler1', 'reference': '535.309.01-0+deb11u1'},
    {'release': '11.0', 'prefix': 'libnvidia-rtcore', 'reference': '535.309.01-0+deb11u1'},
    {'release': '11.0', 'prefix': 'libnvoptix1', 'reference': '535.309.01-0+deb11u1'},
    {'release': '11.0', 'prefix': 'nvidia-alternative', 'reference': '535.309.01-0+deb11u1'},
    {'release': '11.0', 'prefix': 'nvidia-cuda-mps', 'reference': '535.309.01-0+deb11u1'},
    {'release': '11.0', 'prefix': 'nvidia-detect', 'reference': '535.309.01-0+deb11u1'},
    {'release': '11.0', 'prefix': 'nvidia-driver', 'reference': '535.309.01-0+deb11u1'},
    {'release': '11.0', 'prefix': 'nvidia-driver-bin', 'reference': '535.309.01-0+deb11u1'},
    {'release': '11.0', 'prefix': 'nvidia-driver-full', 'reference': '535.309.01-0+deb11u1'},
    {'release': '11.0', 'prefix': 'nvidia-driver-libs', 'reference': '535.309.01-0+deb11u1'},
    {'release': '11.0', 'prefix': 'nvidia-egl-common', 'reference': '535.309.01-0+deb11u1'},
    {'release': '11.0', 'prefix': 'nvidia-egl-icd', 'reference': '535.309.01-0+deb11u1'},
    {'release': '11.0', 'prefix': 'nvidia-kernel-dkms', 'reference': '535.309.01-0+deb11u1'},
    {'release': '11.0', 'prefix': 'nvidia-kernel-source', 'reference': '535.309.01-0+deb11u1'},
    {'release': '11.0', 'prefix': 'nvidia-kernel-support', 'reference': '535.309.01-0+deb11u1'},
    {'release': '11.0', 'prefix': 'nvidia-legacy-check', 'reference': '535.309.01-0+deb11u1'},
    {'release': '11.0', 'prefix': 'nvidia-libopencl1', 'reference': '535.309.01-0+deb11u1'},
    {'release': '11.0', 'prefix': 'nvidia-opencl-common', 'reference': '535.309.01-0+deb11u1'},
    {'release': '11.0', 'prefix': 'nvidia-opencl-icd', 'reference': '535.309.01-0+deb11u1'},
    {'release': '11.0', 'prefix': 'nvidia-powerd', 'reference': '535.309.01-0+deb11u1'},
    {'release': '11.0', 'prefix': 'nvidia-smi', 'reference': '535.309.01-0+deb11u1'},
    {'release': '11.0', 'prefix': 'nvidia-suspend-common', 'reference': '535.309.01-0+deb11u1'},
    {'release': '11.0', 'prefix': 'nvidia-vdpau-driver', 'reference': '535.309.01-0+deb11u1'},
    {'release': '11.0', 'prefix': 'nvidia-vulkan-common', 'reference': '535.309.01-0+deb11u1'},
    {'release': '11.0', 'prefix': 'nvidia-vulkan-icd', 'reference': '535.309.01-0+deb11u1'},
    {'release': '11.0', 'prefix': 'xserver-xorg-video-nvidia', 'reference': '535.309.01-0+deb11u1'}
];

var flag = 0;
foreach package_array ( pkgs ) {
  var _release = NULL;
  var prefix = NULL;
  var reference = NULL;
  if (!empty_or_null(package_array['release'])) _release = package_array['release'];
  if (!empty_or_null(package_array['prefix'])) prefix = package_array['prefix'];
  if (!empty_or_null(package_array['reference'])) reference = package_array['reference'];
  if (_release && prefix && reference) {
    if (deb_check(release:_release, prefix:prefix, reference:reference)) flag++;
  }
}

if (flag)
{
  security_report_v4(
    port       : 0,
    severity   : SECURITY_WARNING,
    extra      : deb_report_get()
  );
  exit(0);
}
else
{
  var tested = deb_pkg_tests_get();
  if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
  else audit(AUDIT_PACKAGE_NOT_INSTALLED, 'firmware-nvidia-gsp / libcuda1 / libcudadebugger1 / libegl-nvidia0 / etc');
}