[USN-5547-1] NVIDIA graphics drivers vulnerabilities


========================================================================== Ubuntu Security Notice USN-5547-1 August 03, 2022
nvidia-graphics-drivers-390, nvidia-graphics-drivers-450-server, nvidia-graphics-drivers-470, nvidia-graphics-drivers-470-server, nvidia-graphics-drivers-510, nvidia-graphics-drivers-510-server, nvidia-graphics-drivers-515, nvidia-graphics-drivers-515-server vulnerabilities ==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
– Ubuntu 22.04 LTS – Ubuntu 20.04 LTS – Ubuntu 18.04 LTS
Summary:
Several security issues were fixed in NVIDIA graphics drivers.
Software Description: – nvidia-graphics-drivers-390: NVIDIA binary X.Org driver – nvidia-graphics-drivers-450-server: NVIDIA server driver – nvidia-graphics-drivers-470: NVIDIA binary X.Org driver – nvidia-graphics-drivers-470-server: NVIDIA server driver – nvidia-graphics-drivers-510: NVIDIA binary X.Org driver – nvidia-graphics-drivers-510-server: NVIDIA server driver – nvidia-graphics-drivers-515: NVIDIA binary X.Org driver – nvidia-graphics-drivers-515-server: NVIDIA server driver
Details:
Le Wu discovered that the NVIDIA graphics drivers did not properly perform input validation in some situations. A local user could use this to cause a denial of service or possibly execute arbitrary code. (CVE-2022-31607)
Tal Lossos discovered that the NVIDIA graphics drivers incorrectly handled certain memory operations, leading to a null-pointer dereference. A local attacker could use this to cause a denial of service. (CVE-2022-31615)
Artem S. Tashkinov discovered that the NVIDIA graphics drivers Dynamic Boost D-Bus component did not properly restrict access to its endpoint. When enabled in non-default configurations, a local attacker could use this to cause a denial of service or possibly execute arbitrary code. (CVE-2022-31608)
Update instructions:
The problem can be corrected by updating your system to the following package versions:
Ubuntu 22.04 LTS: xserver-xorg-video-nvidia-390 390.154-0ubuntu0.22.04.1 xserver-xorg-video-nvidia-440-server 450.203.03-0ubuntu0.22.04.1 xserver-xorg-video-nvidia-450-server 450.203.03-0ubuntu0.22.04.1 xserver-xorg-video-nvidia-460 470.141.03-0ubuntu0.22.04.1 xserver-xorg-video-nvidia-460-server 470.141.03-0ubuntu0.22.04.1 xserver-xorg-video-nvidia-465 470.141.03-0ubuntu0.22.04.1 xserver-xorg-video-nvidia-470 470.141.03-0ubuntu0.22.04.1 xserver-xorg-video-nvidia-470-server 470.141.03-0ubuntu0.22.04.1 xserver-xorg-video-nvidia-495 510.85.02-0ubuntu0.22.04.1 xserver-xorg-video-nvidia-510 510.85.02-0ubuntu0.22.04.1 xserver-xorg-video-nvidia-510-server 510.85.02-0ubuntu0.22.04.1 xserver-xorg-video-nvidia-515 515.65.01-0ubuntu0.22.04.1 xserver-xorg-video-nvidia-515-server 515.65.01-0ubuntu0.22.04.1
Ubuntu 20.04 LTS: xserver-xorg-video-nvidia-390 390.154-0ubuntu0.20.04.1 xserver-xorg-video-nvidia-440-server 450.203.03-0ubuntu0.20.04.1 xserver-xorg-video-nvidia-450-server 450.203.03-0ubuntu0.20.04.1 xserver-xorg-video-nvidia-460 470.141.03-0ubuntu0.20.04.1 xserver-xorg-video-nvidia-460-server 470.141.03-0ubuntu0.20.04.1 xserver-xorg-video-nvidia-465 470.141.03-0ubuntu0.20.04.1 xserver-xorg-video-nvidia-470 470.141.03-0ubuntu0.20.04.1 xserver-xorg-video-nvidia-470-server 470.141.03-0ubuntu0.20.04.1 xserver-xorg-video-nvidia-495 510.85.02-0ubuntu0.20.04.1 xserver-xorg-video-nvidia-510 510.85.02-0ubuntu0.20.04.1 xserver-xorg-video-nvidia-510-server 510.85.02-0ubuntu0.20.04.1 xserver-xorg-video-nvidia-515 515.65.01-0ubuntu0.20.04.1 xserver-xorg-video-nvidia-515-server 515.65.01-0ubuntu0.20.04.1
Ubuntu 18.04 LTS: xserver-xorg-video-nvidia-390 390.154-0ubuntu0.18.04.1 xserver-xorg-video-nvidia-440-server 450.203.03-0ubuntu0.18.04.1 xserver-xorg-video-nvidia-450-server 450.203.03-0ubuntu0.18.04.1 xserver-xorg-video-nvidia-460 470.141.03-0ubuntu0.18.04.1 xserver-xorg-video-nvidia-460-server 470.141.03-0ubuntu0.18.04.1 xserver-xorg-video-nvidia-465 470.141.03-0ubuntu0.18.04.1 xserver-xorg-video-nvidia-470 470.141.03-0ubuntu0.18.04.1 xserver-xorg-video-nvidia-470-server 470.141.03-0ubuntu0.18.04.1 xserver-xorg-video-nvidia-495 510.85.02-0ubuntu0.18.04.1 xserver-xorg-video-nvidia-510 510.85.02-0ubuntu0.18.04.1 xserver-xorg-video-nvidia-510-server 510.85.02-0ubuntu0.18.04.1 xserver-xorg-video-nvidia-515 515.65.01-0ubuntu0.18.04.1 xserver-xorg-video-nvidia-515-server 515.65.01-0ubuntu0.18.04.1
After a standard system update you need to reboot your computer to make all the necessary changes.
References: ubuntu.com/security/notices/USN-5547-1 CVE-2022-31607, CVE-2022-31608, CVE-2022-31615
Package Information: launchpad.net/ubuntu/+source/nvidia-graphics-drivers-390/390.154-0ubuntu0.22.04.1 launchpad.net/ubuntu/+source/nvidia-graphics-drivers-450-server/450.203.03-0ubuntu0.22.04.1 launchpad.net/ubuntu/+source/nvidia-graphics-drivers-470/470.141.03-0ubuntu0.22.04.1 launchpad.net/ubuntu/+source/nvidia-graphics-drivers-470-server/470.141.03-0ubuntu0.22.04.1 launchpad.net/ubuntu/+source/nvidia-graphics-drivers-510/510.85.02-0ubuntu0.22.04.1 launchpad.net/ubuntu/+source/nvidia-graphics-drivers-510-server/510.85.02-0ubuntu0.22.04.1 launchpad.net/ubuntu/+source/nvidia-graphics-drivers-515/515.65.01-0ubuntu0.22.04.1 launchpad.net/ubuntu/+source/nvidia-graphics-drivers-515-server/515.65.01-0ubuntu0.22.04.1 launchpad.net/ubuntu/+source/nvidia-graphics-drivers-390/390.154-0ubuntu0.20.04.1 launchpad.net/ubuntu/+source/nvidia-graphics-drivers-450-server/450.203.03-0ubuntu0.20.04.1 launchpad.net/ubuntu/+source/nvidia-graphics-drivers-470/470.141.03-0ubuntu0.20.04.1 launchpad.net/ubuntu/+source/nvidia-graphics-drivers-470-server/470.141.03-0ubuntu0.20.04.1 launchpad.net/ubuntu/+source/nvidia-graphics-drivers-510/510.85.02-0ubuntu0.20.04.1 launchpad.net/ubuntu/+source/nvidia-graphics-drivers-510-server/510.85.02-0ubuntu0.20.04.1 launchpad.net/ubuntu/+source/nvidia-graphics-drivers-515/515.65.01-0ubuntu0.20.04.1 launchpad.net/ubuntu/+source/nvidia-graphics-drivers-515-server/515.65.01-0ubuntu0.20.04.1 launchpad.net/ubuntu/+source/nvidia-graphics-drivers-390/390.154-0ubuntu0.18.04.1 launchpad.net/ubuntu/+source/nvidia-graphics-drivers-450-server/450.203.03-0ubuntu0.18.04.1 launchpad.net/ubuntu/+source/nvidia-graphics-drivers-470/470.141.03-0ubuntu0.18.04.1 launchpad.net/ubuntu/+source/nvidia-graphics-drivers-470-server/470.141.03-0ubuntu0.18.04.1 launchpad.net/ubuntu/+source/nvidia-graphics-drivers-510/510.85.02-0ubuntu0.18.04.1 launchpad.net/ubuntu/+source/nvidia-graphics-drivers-510-server/510.85.02-0ubuntu0.18.04.1 launchpad.net/ubuntu/+source/nvidia-graphics-drivers-515/515.65.01-0ubuntu0.18.04.1 launchpad.net/ubuntu/+source/nvidia-graphics-drivers-515-server/515.65.01-0ubuntu0.18.04.1