Bug#1004849: nvidia-graphics-drivers: CVE-2022-21813, CVE-2022-21814

[Vincent Lefevre]

On 2022-02-02 11:47:50 +0100, Andreas Beckmann wrote:
> https://nvidia.custhelp.com/app/answers/detail/a_id/5312
> 
> CVE‑2022‑21813 	NVIDIA GPU Display Driver for Linux contains a
> vulnerability in the kernel driver, where improper handling of
> insufficient permissions or privileges may allow an unprivileged
> local user limited write access to protected memory, which can
> lead to denial of service.
> 
> CVE‑2022‑21814 	NVIDIA GPU Display Driver for Linux contains a
> vulnerability in the kernel driver package, where improper
> handling of insufficient permissions or privileges may allow an
> unprivileged local user limited write access to protected memory,
> which can lead to denial of service.
> 
> Driver Branch		CVE IDs Addressed
> R510, R470		CVE-2022-21813, CVE-2022-21814

Bug 1004847 against src:nvidia-graphics-drivers was cloned as 1004849,
which got reassigned to src:nvidia-graphics-drivers-legacy-390xx, but
is 390xx affected? It is not listed on

  https://nvidia.custhelp.com/app/answers/detail/a_id/5312

Only driver branches R470 and R510 are listed.

-- 
Vincent Lefèvre <vincent at vinc17.net> - Web: <https://www.vinc17.net/>
100% accessible validated (X)HTML - Blog: <https://www.vinc17.net/blog/>
Work: CR INRIA - computer arithmetic / AriC project (LIP, ENS-Lyon)