Lucene search

K
mageiaGentoo FoundationMGASA-2015-0407
HistoryOct 25, 2015 - 5:38 p.m.

Updated nvidia driver packages fix security vulnerability

2015-10-2517:38:05
Gentoo Foundation
advisories.mageia.org
6

0.0004 Low

EPSS

Percentile

5.2%

A vulnerability has been found in the nvidia proprietary driver that could be used to allow a local, non-privileged user to corrupt kernel memory. This could be used to gain local root privileges. A local user can issue a specially crafted IOCTL to write a 32-bit integer value stored in the kernel driver to a user-specified memory location, potentially in the kernel address space. The user has a limited ability to influence the value of the integer that is written. (CVE-2015-5950)