usn-4689-3
Vulnerability from osv_ubuntu
Published
2021-01-20 13:13
Modified
2026-02-10 04:42
Summary
nvidia-graphics-drivers-418-server, nvidia-graphics-drivers-450-server vulnerabilities
Details
It was discovered that the NVIDIA GPU display driver for the Linux kernel contained a vulnerability that allowed user-mode clients to access legacy privileged APIs. A local attacker could use this to cause a denial of service or escalate privileges. (CVE-2021-1052)
It was discovered that the NVIDIA GPU display driver for the Linux kernel did not properly validate a pointer received from userspace in some situations. A local attacker could use this to cause a denial of service. (CVE-2021-1053)
Xinyuan Lyu discovered that the NVIDIA GPU display driver for the Linux kernel did not properly restrict device-level GPU isolation. A local attacker could use this to cause a denial of service or possibly expose sensitive information. (CVE-2021-1056)
References
| URL | Type | |
|---|---|---|
{
"affected": [
{
"database_specific": {
"cves_map": {
"cves": [
{
"id": "CVE-2021-1052",
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2021-1053",
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
}
],
"ecosystem": "Ubuntu:18.04:LTS"
}
},
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "libnvidia-cfg1-418-server",
"binary_version": "418.181.07-0ubuntu0.18.04.1"
},
{
"binary_name": "libnvidia-common-418-server",
"binary_version": "418.181.07-0ubuntu0.18.04.1"
},
{
"binary_name": "libnvidia-compute-418-server",
"binary_version": "418.181.07-0ubuntu0.18.04.1"
},
{
"binary_name": "libnvidia-decode-418-server",
"binary_version": "418.181.07-0ubuntu0.18.04.1"
},
{
"binary_name": "libnvidia-encode-418-server",
"binary_version": "418.181.07-0ubuntu0.18.04.1"
},
{
"binary_name": "libnvidia-fbc1-418-server",
"binary_version": "418.181.07-0ubuntu0.18.04.1"
},
{
"binary_name": "libnvidia-gl-418-server",
"binary_version": "418.181.07-0ubuntu0.18.04.1"
},
{
"binary_name": "libnvidia-ifr1-418-server",
"binary_version": "418.181.07-0ubuntu0.18.04.1"
},
{
"binary_name": "nvidia-compute-utils-418-server",
"binary_version": "418.181.07-0ubuntu0.18.04.1"
},
{
"binary_name": "nvidia-dkms-418-server",
"binary_version": "418.181.07-0ubuntu0.18.04.1"
},
{
"binary_name": "nvidia-driver-418-server",
"binary_version": "418.181.07-0ubuntu0.18.04.1"
},
{
"binary_name": "nvidia-headless-418-server",
"binary_version": "418.181.07-0ubuntu0.18.04.1"
},
{
"binary_name": "nvidia-headless-no-dkms-418-server",
"binary_version": "418.181.07-0ubuntu0.18.04.1"
},
{
"binary_name": "nvidia-kernel-common-418-server",
"binary_version": "418.181.07-0ubuntu0.18.04.1"
},
{
"binary_name": "nvidia-kernel-source-418-server",
"binary_version": "418.181.07-0ubuntu0.18.04.1"
},
{
"binary_name": "nvidia-utils-418-server",
"binary_version": "418.181.07-0ubuntu0.18.04.1"
},
{
"binary_name": "xserver-xorg-video-nvidia-418-server",
"binary_version": "418.181.07-0ubuntu0.18.04.1"
}
]
},
"package": {
"ecosystem": "Ubuntu:18.04:LTS",
"name": "nvidia-graphics-drivers-418-server",
"purl": "pkg:deb/ubuntu/nvidia-graphics-drivers-418-server@418.181.07-0ubuntu0.18.04.1?arch=source\u0026distro=bionic"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "418.181.07-0ubuntu0.18.04.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"418.152.00-0ubuntu0.18.04.1"
]
},
{
"database_specific": {
"cves_map": {
"cves": [
{
"id": "CVE-2021-1052",
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2021-1053",
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
}
],
"ecosystem": "Ubuntu:18.04:LTS"
}
},
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "libnvidia-cfg1-440-server",
"binary_version": "450.102.04-0ubuntu0.18.04.1"
},
{
"binary_name": "libnvidia-cfg1-450-server",
"binary_version": "450.102.04-0ubuntu0.18.04.1"
},
{
"binary_name": "libnvidia-common-440-server",
"binary_version": "450.102.04-0ubuntu0.18.04.1"
},
{
"binary_name": "libnvidia-common-450-server",
"binary_version": "450.102.04-0ubuntu0.18.04.1"
},
{
"binary_name": "libnvidia-compute-440-server",
"binary_version": "450.102.04-0ubuntu0.18.04.1"
},
{
"binary_name": "libnvidia-compute-450-server",
"binary_version": "450.102.04-0ubuntu0.18.04.1"
},
{
"binary_name": "libnvidia-decode-440-server",
"binary_version": "450.102.04-0ubuntu0.18.04.1"
},
{
"binary_name": "libnvidia-decode-450-server",
"binary_version": "450.102.04-0ubuntu0.18.04.1"
},
{
"binary_name": "libnvidia-encode-440-server",
"binary_version": "450.102.04-0ubuntu0.18.04.1"
},
{
"binary_name": "libnvidia-encode-450-server",
"binary_version": "450.102.04-0ubuntu0.18.04.1"
},
{
"binary_name": "libnvidia-extra-440-server",
"binary_version": "450.102.04-0ubuntu0.18.04.1"
},
{
"binary_name": "libnvidia-extra-450-server",
"binary_version": "450.102.04-0ubuntu0.18.04.1"
},
{
"binary_name": "libnvidia-fbc1-440-server",
"binary_version": "450.102.04-0ubuntu0.18.04.1"
},
{
"binary_name": "libnvidia-fbc1-450-server",
"binary_version": "450.102.04-0ubuntu0.18.04.1"
},
{
"binary_name": "libnvidia-gl-440-server",
"binary_version": "450.102.04-0ubuntu0.18.04.1"
},
{
"binary_name": "libnvidia-gl-450-server",
"binary_version": "450.102.04-0ubuntu0.18.04.1"
},
{
"binary_name": "libnvidia-ifr1-440-server",
"binary_version": "450.102.04-0ubuntu0.18.04.1"
},
{
"binary_name": "libnvidia-ifr1-450-server",
"binary_version": "450.102.04-0ubuntu0.18.04.1"
},
{
"binary_name": "nvidia-compute-utils-440-server",
"binary_version": "450.102.04-0ubuntu0.18.04.1"
},
{
"binary_name": "nvidia-compute-utils-450-server",
"binary_version": "450.102.04-0ubuntu0.18.04.1"
},
{
"binary_name": "nvidia-dkms-440-server",
"binary_version": "450.102.04-0ubuntu0.18.04.1"
},
{
"binary_name": "nvidia-dkms-450-server",
"binary_version": "450.102.04-0ubuntu0.18.04.1"
},
{
"binary_name": "nvidia-driver-440-server",
"binary_version": "450.102.04-0ubuntu0.18.04.1"
},
{
"binary_name": "nvidia-driver-450-server",
"binary_version": "450.102.04-0ubuntu0.18.04.1"
},
{
"binary_name": "nvidia-headless-440-server",
"binary_version": "450.102.04-0ubuntu0.18.04.1"
},
{
"binary_name": "nvidia-headless-450-server",
"binary_version": "450.102.04-0ubuntu0.18.04.1"
},
{
"binary_name": "nvidia-headless-no-dkms-440-server",
"binary_version": "450.102.04-0ubuntu0.18.04.1"
},
{
"binary_name": "nvidia-headless-no-dkms-450-server",
"binary_version": "450.102.04-0ubuntu0.18.04.1"
},
{
"binary_name": "nvidia-kernel-common-440-server",
"binary_version": "450.102.04-0ubuntu0.18.04.1"
},
{
"binary_name": "nvidia-kernel-common-450-server",
"binary_version": "450.102.04-0ubuntu0.18.04.1"
},
{
"binary_name": "nvidia-kernel-source-440-server",
"binary_version": "450.102.04-0ubuntu0.18.04.1"
},
{
"binary_name": "nvidia-kernel-source-450-server",
"binary_version": "450.102.04-0ubuntu0.18.04.1"
},
{
"binary_name": "nvidia-utils-440-server",
"binary_version": "450.102.04-0ubuntu0.18.04.1"
},
{
"binary_name": "nvidia-utils-450-server",
"binary_version": "450.102.04-0ubuntu0.18.04.1"
},
{
"binary_name": "xserver-xorg-video-nvidia-440-server",
"binary_version": "450.102.04-0ubuntu0.18.04.1"
},
{
"binary_name": "xserver-xorg-video-nvidia-450-server",
"binary_version": "450.102.04-0ubuntu0.18.04.1"
}
]
},
"package": {
"ecosystem": "Ubuntu:18.04:LTS",
"name": "nvidia-graphics-drivers-450-server",
"purl": "pkg:deb/ubuntu/nvidia-graphics-drivers-450-server@450.102.04-0ubuntu0.18.04.1?arch=source\u0026distro=bionic"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "450.102.04-0ubuntu0.18.04.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"450.51.06-0ubuntu0.18.04.2",
"450.80.02-0ubuntu0.18.04.3"
]
},
{
"database_specific": {
"cves_map": {
"cves": [
{
"id": "CVE-2021-1052",
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2021-1053",
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
}
],
"ecosystem": "Ubuntu:20.04:LTS"
}
},
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "libnvidia-cfg1-418-server",
"binary_version": "418.181.07-0ubuntu0.20.04.1"
},
{
"binary_name": "libnvidia-common-418-server",
"binary_version": "418.181.07-0ubuntu0.20.04.1"
},
{
"binary_name": "libnvidia-compute-418-server",
"binary_version": "418.181.07-0ubuntu0.20.04.1"
},
{
"binary_name": "libnvidia-decode-418-server",
"binary_version": "418.181.07-0ubuntu0.20.04.1"
},
{
"binary_name": "libnvidia-encode-418-server",
"binary_version": "418.181.07-0ubuntu0.20.04.1"
},
{
"binary_name": "libnvidia-fbc1-418-server",
"binary_version": "418.181.07-0ubuntu0.20.04.1"
},
{
"binary_name": "libnvidia-gl-418-server",
"binary_version": "418.181.07-0ubuntu0.20.04.1"
},
{
"binary_name": "libnvidia-ifr1-418-server",
"binary_version": "418.181.07-0ubuntu0.20.04.1"
},
{
"binary_name": "nvidia-compute-utils-418-server",
"binary_version": "418.181.07-0ubuntu0.20.04.1"
},
{
"binary_name": "nvidia-dkms-418-server",
"binary_version": "418.181.07-0ubuntu0.20.04.1"
},
{
"binary_name": "nvidia-driver-418-server",
"binary_version": "418.181.07-0ubuntu0.20.04.1"
},
{
"binary_name": "nvidia-headless-418-server",
"binary_version": "418.181.07-0ubuntu0.20.04.1"
},
{
"binary_name": "nvidia-headless-no-dkms-418-server",
"binary_version": "418.181.07-0ubuntu0.20.04.1"
},
{
"binary_name": "nvidia-kernel-common-418-server",
"binary_version": "418.181.07-0ubuntu0.20.04.1"
},
{
"binary_name": "nvidia-kernel-source-418-server",
"binary_version": "418.181.07-0ubuntu0.20.04.1"
},
{
"binary_name": "nvidia-utils-418-server",
"binary_version": "418.181.07-0ubuntu0.20.04.1"
},
{
"binary_name": "xserver-xorg-video-nvidia-418-server",
"binary_version": "418.181.07-0ubuntu0.20.04.1"
}
]
},
"package": {
"ecosystem": "Ubuntu:20.04:LTS",
"name": "nvidia-graphics-drivers-418-server",
"purl": "pkg:deb/ubuntu/nvidia-graphics-drivers-418-server@418.181.07-0ubuntu0.20.04.1?arch=source\u0026distro=focal"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "418.181.07-0ubuntu0.20.04.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"418.152.00-0ubuntu0.20.04.1"
]
},
{
"database_specific": {
"cves_map": {
"cves": [
{
"id": "CVE-2021-1052",
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2021-1053",
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
}
],
"ecosystem": "Ubuntu:20.04:LTS"
}
},
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "libnvidia-cfg1-440-server",
"binary_version": "450.102.04-0ubuntu0.20.04.1"
},
{
"binary_name": "libnvidia-cfg1-450-server",
"binary_version": "450.102.04-0ubuntu0.20.04.1"
},
{
"binary_name": "libnvidia-common-440-server",
"binary_version": "450.102.04-0ubuntu0.20.04.1"
},
{
"binary_name": "libnvidia-common-450-server",
"binary_version": "450.102.04-0ubuntu0.20.04.1"
},
{
"binary_name": "libnvidia-compute-440-server",
"binary_version": "450.102.04-0ubuntu0.20.04.1"
},
{
"binary_name": "libnvidia-compute-450-server",
"binary_version": "450.102.04-0ubuntu0.20.04.1"
},
{
"binary_name": "libnvidia-decode-440-server",
"binary_version": "450.102.04-0ubuntu0.20.04.1"
},
{
"binary_name": "libnvidia-decode-450-server",
"binary_version": "450.102.04-0ubuntu0.20.04.1"
},
{
"binary_name": "libnvidia-encode-440-server",
"binary_version": "450.102.04-0ubuntu0.20.04.1"
},
{
"binary_name": "libnvidia-encode-450-server",
"binary_version": "450.102.04-0ubuntu0.20.04.1"
},
{
"binary_name": "libnvidia-extra-440-server",
"binary_version": "450.102.04-0ubuntu0.20.04.1"
},
{
"binary_name": "libnvidia-extra-450-server",
"binary_version": "450.102.04-0ubuntu0.20.04.1"
},
{
"binary_name": "libnvidia-fbc1-440-server",
"binary_version": "450.102.04-0ubuntu0.20.04.1"
},
{
"binary_name": "libnvidia-fbc1-450-server",
"binary_version": "450.102.04-0ubuntu0.20.04.1"
},
{
"binary_name": "libnvidia-gl-440-server",
"binary_version": "450.102.04-0ubuntu0.20.04.1"
},
{
"binary_name": "libnvidia-gl-450-server",
"binary_version": "450.102.04-0ubuntu0.20.04.1"
},
{
"binary_name": "libnvidia-ifr1-440-server",
"binary_version": "450.102.04-0ubuntu0.20.04.1"
},
{
"binary_name": "libnvidia-ifr1-450-server",
"binary_version": "450.102.04-0ubuntu0.20.04.1"
},
{
"binary_name": "nvidia-compute-utils-440-server",
"binary_version": "450.102.04-0ubuntu0.20.04.1"
},
{
"binary_name": "nvidia-compute-utils-450-server",
"binary_version": "450.102.04-0ubuntu0.20.04.1"
},
{
"binary_name": "nvidia-dkms-440-server",
"binary_version": "450.102.04-0ubuntu0.20.04.1"
},
{
"binary_name": "nvidia-dkms-450-server",
"binary_version": "450.102.04-0ubuntu0.20.04.1"
},
{
"binary_name": "nvidia-driver-440-server",
"binary_version": "450.102.04-0ubuntu0.20.04.1"
},
{
"binary_name": "nvidia-driver-450-server",
"binary_version": "450.102.04-0ubuntu0.20.04.1"
},
{
"binary_name": "nvidia-headless-440-server",
"binary_version": "450.102.04-0ubuntu0.20.04.1"
},
{
"binary_name": "nvidia-headless-450-server",
"binary_version": "450.102.04-0ubuntu0.20.04.1"
},
{
"binary_name": "nvidia-headless-no-dkms-440-server",
"binary_version": "450.102.04-0ubuntu0.20.04.1"
},
{
"binary_name": "nvidia-headless-no-dkms-450-server",
"binary_version": "450.102.04-0ubuntu0.20.04.1"
},
{
"binary_name": "nvidia-kernel-common-440-server",
"binary_version": "450.102.04-0ubuntu0.20.04.1"
},
{
"binary_name": "nvidia-kernel-common-450-server",
"binary_version": "450.102.04-0ubuntu0.20.04.1"
},
{
"binary_name": "nvidia-kernel-source-440-server",
"binary_version": "450.102.04-0ubuntu0.20.04.1"
},
{
"binary_name": "nvidia-kernel-source-450-server",
"binary_version": "450.102.04-0ubuntu0.20.04.1"
},
{
"binary_name": "nvidia-utils-440-server",
"binary_version": "450.102.04-0ubuntu0.20.04.1"
},
{
"binary_name": "nvidia-utils-450-server",
"binary_version": "450.102.04-0ubuntu0.20.04.1"
},
{
"binary_name": "xserver-xorg-video-nvidia-440-server",
"binary_version": "450.102.04-0ubuntu0.20.04.1"
},
{
"binary_name": "xserver-xorg-video-nvidia-450-server",
"binary_version": "450.102.04-0ubuntu0.20.04.1"
}
]
},
"package": {
"ecosystem": "Ubuntu:20.04:LTS",
"name": "nvidia-graphics-drivers-450-server",
"purl": "pkg:deb/ubuntu/nvidia-graphics-drivers-450-server@450.102.04-0ubuntu0.20.04.1?arch=source\u0026distro=focal"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "450.102.04-0ubuntu0.20.04.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"450.51.06-0ubuntu0.20.04.2",
"450.80.02-0ubuntu0.20.04.3"
]
}
],
"aliases": [],
"details": "It was discovered that the NVIDIA GPU display driver for the Linux kernel\ncontained a vulnerability that allowed user-mode clients to access legacy\nprivileged APIs. A local attacker could use this to cause a denial of\nservice or escalate privileges. (CVE-2021-1052)\n\nIt was discovered that the NVIDIA GPU display driver for the Linux kernel\ndid not properly validate a pointer received from userspace in some\nsituations. A local attacker could use this to cause a denial of service.\n(CVE-2021-1053)\n\nXinyuan Lyu discovered that the NVIDIA GPU display driver for the Linux\nkernel did not properly restrict device-level GPU isolation. A local\nattacker could use this to cause a denial of service or possibly expose\nsensitive information. (CVE-2021-1056)\n",
"id": "USN-4689-3",
"modified": "2026-02-10T04:42:02Z",
"published": "2021-01-20T13:13:38Z",
"references": [
{
"type": "ADVISORY",
"url": "https://ubuntu.com/security/notices/USN-4689-3"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2021-1052"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2021-1053"
}
],
"related": [],
"schema_version": "1.7.0",
"summary": "nvidia-graphics-drivers-418-server, nvidia-graphics-drivers-450-server vulnerabilities",
"upstream": [
"UBUNTU-CVE-2021-1052",
"UBUNTU-CVE-2021-1053"
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…