2020年6月27日 星期六

[USN-4404-2] Linux kernel vulnerabilities

---------- Forwarded message ---------
From: Steve Beattie <steve.beattie@canonical.com>
Date: Jun 26, 2020 5:49AM

 Thomas E. Carroll discovered that the NVIDIA Cuda grpahics driver did not
 properly perform access control when performing IPC. An attacker could use
 this to cause a denial of service or possibly execute arbitrary code.
 (CVE-2020-5963)

 It was discovered that the UVM driver in the NVIDIA graphics driver
 contained a race condition. A local attacker could use this to cause a
 denial of service. (CVE-2020-5967)

 It was discovered that the NVIDIA virtual GPU guest drivers contained
 an unspecified vulnerability that could potentially lead to privileged
 operation execution. An attacker could use this to cause a denial of
 service. (CVE-2020-5973)

References:
  https://usn.ubuntu.com/4404-2
  https://usn.ubuntu.com/4404-1
  CVE-2020-5963, CVE-2020-5967, CVE-2020-5973

沒有留言:

張貼留言