UbuntuUSN-5276-1NVIDIA graphics drivers vulnerabilities
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:N/I:P/A:P
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H
AI Score
Confidence
High
EPSS
Percentile
5.1%
Releases
- Ubuntu 21.10
- Ubuntu 20.04 LTS
- Ubuntu 18.04 ESM
Packages
- nvidia-graphics-drivers-450-server - NVIDIA Server Driver
- nvidia-graphics-drivers-470 - NVIDIA binary X.Org driver
- nvidia-graphics-drivers-470-server - NVIDIA Server Driver
- nvidia-graphics-drivers-510 - NVIDIA binary X.Org driver
Details
It was discovered that the NVIDIA graphics drivers incorrectly handled
permissions in the kernel mode layer. A local attacker could use this issue
to write to protected memory and cause a denial of service.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 21.10 | noarch | xserver-xorg-video-nvidia-470 | < 470.103.01-0ubuntu0.21.10.1 | UNKNOWN |
| Ubuntu | 21.10 | noarch | libnvidia-cfg1-460 | < 470.103.01-0ubuntu0.21.10.1 | UNKNOWN |
| Ubuntu | 21.10 | noarch | libnvidia-cfg1-465 | < 470.103.01-0ubuntu0.21.10.1 | UNKNOWN |
| Ubuntu | 21.10 | noarch | libnvidia-cfg1-470 | < 470.103.01-0ubuntu0.21.10.1 | UNKNOWN |
| Ubuntu | 21.10 | noarch | libnvidia-common-460 | < 470.103.01-0ubuntu0.21.10.1 | UNKNOWN |
| Ubuntu | 21.10 | noarch | libnvidia-common-465 | < 470.103.01-0ubuntu0.21.10.1 | UNKNOWN |
| Ubuntu | 21.10 | noarch | libnvidia-common-470 | < 470.103.01-0ubuntu0.21.10.1 | UNKNOWN |
| Ubuntu | 21.10 | noarch | libnvidia-compute-460 | < 470.103.01-0ubuntu0.21.10.1 | UNKNOWN |
| Ubuntu | 21.10 | noarch | libnvidia-compute-465 | < 470.103.01-0ubuntu0.21.10.1 | UNKNOWN |
| Ubuntu | 21.10 | noarch | libnvidia-compute-470 | < 470.103.01-0ubuntu0.21.10.1 | UNKNOWN |
Related
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:N/I:P/A:P
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H
AI Score
Confidence
High
EPSS
Percentile
5.1%