[GLSA-202310-02] NVIDIA Drivers: Multiple Vulnerabilities

Severity Normal

Affected Packages 4

Unaffected Packages 4

CVEs 50

Multiple vulnerabilities have been discovered in NVIDIA Drivers, the worst of which could result in root privilege escalation.

Background
NVIDIA Drivers are NVIDIA's accelerated graphics driver.

Description
Multiple vulnerabilities have been discovered in NVIDIA Drivers. Please review the CVE identifiers referenced below for details.

Impact
Please review the referenced CVE identifiers for details.

Workaround
There is no known workaround at this time.

Resolution
All NVIDIA Drivers 470 users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=x11-drivers/nvidia-drivers-470.182.03:0/470"

All NVIDIA Drivers 515 users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=x11-drivers/nvidia-drivers-515.105.01:0/515"

All NVIDIA Drivers 525 users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=x11-drivers/nvidia-drivers-525.105.17:0/525"

All NVIDIA Drivers 530 users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=x11-drivers/nvidia-drivers-530.41.03:0/530"

Package	Affected Version
pkg:ebuild/x11-drivers/nvidia-drivers?distro=gentoo	< 470.182.03
pkg:ebuild/x11-drivers/nvidia-drivers?distro=gentoo	< 515.105.01
pkg:ebuild/x11-drivers/nvidia-drivers?distro=gentoo	< 525.105.17
pkg:ebuild/x11-drivers/nvidia-drivers?distro=gentoo	< 530.41.03

Package	Unaffected Version
pkg:ebuild/x11-drivers/nvidia-drivers?distro=gentoo	>= 470.182.03
pkg:ebuild/x11-drivers/nvidia-drivers?distro=gentoo	>= 515.105.01
pkg:ebuild/x11-drivers/nvidia-drivers?distro=gentoo	>= 525.105.17
pkg:ebuild/x11-drivers/nvidia-drivers?distro=gentoo	>= 530.41.03

ID

GLSA-202310-02

Severity

normal

URL

https://security.gentoo.org/glsa/202310-02

Published

2023-10-03T00:00:00
(11 months ago)

Modified

2023-10-03T00:00:00
(11 months ago)

Rights

Gentoo Foundation, Inc.

Other Advisories

Source	# ID	Name	URL
CVE	CVE-2021-1052	CVE-2021-1052	https://nvd.nist.gov/vuln/detail/CVE-2021-1052
CVE	CVE-2021-1053	CVE-2021-1053	https://nvd.nist.gov/vuln/detail/CVE-2021-1053
CVE	CVE-2021-1056	CVE-2021-1056	https://nvd.nist.gov/vuln/detail/CVE-2021-1056
Vendor		CVE‑2021‑1076	https://nvd.nist.gov/vuln/detail/CVE‑2021‑1076
Vendor		CVE‑2021‑1077	https://nvd.nist.gov/vuln/detail/CVE‑2021‑1077
CVE	CVE-2021-1090	CVE-2021-1090	https://nvd.nist.gov/vuln/detail/CVE-2021-1090
CVE	CVE-2021-1093	CVE-2021-1093	https://nvd.nist.gov/vuln/detail/CVE-2021-1093
CVE	CVE-2021-1094	CVE-2021-1094	https://nvd.nist.gov/vuln/detail/CVE-2021-1094
CVE	CVE-2021-1095	CVE-2021-1095	https://nvd.nist.gov/vuln/detail/CVE-2021-1095
Vendor		CVE‑2022‑21813	https://nvd.nist.gov/vuln/detail/CVE‑2022‑21813
Vendor		CVE‑2022‑21814	https://nvd.nist.gov/vuln/detail/CVE‑2022‑21814
CVE	CVE-2022-28181	CVE-2022-28181	https://nvd.nist.gov/vuln/detail/CVE-2022-28181
CVE	CVE-2022-28183	CVE-2022-28183	https://nvd.nist.gov/vuln/detail/CVE-2022-28183
CVE	CVE-2022-28184	CVE-2022-28184	https://nvd.nist.gov/vuln/detail/CVE-2022-28184
CVE	CVE-2022-28185	CVE-2022-28185	https://nvd.nist.gov/vuln/detail/CVE-2022-28185
CVE	CVE-2022-31607	CVE-2022-31607	https://nvd.nist.gov/vuln/detail/CVE-2022-31607
CVE	CVE-2022-31608	CVE-2022-31608	https://nvd.nist.gov/vuln/detail/CVE-2022-31608
CVE	CVE-2022-31615	CVE-2022-31615	https://nvd.nist.gov/vuln/detail/CVE-2022-31615
Vendor		CVE‑2022‑34665	https://nvd.nist.gov/vuln/detail/CVE‑2022‑34665
CVE	CVE-2022-34666	CVE-2022-34666	https://nvd.nist.gov/vuln/detail/CVE-2022-34666
CVE	CVE-2022-34670	CVE-2022-34670	https://nvd.nist.gov/vuln/detail/CVE-2022-34670
CVE	CVE-2022-34673	CVE-2022-34673	https://nvd.nist.gov/vuln/detail/CVE-2022-34673
CVE	CVE-2022-34674	CVE-2022-34674	https://nvd.nist.gov/vuln/detail/CVE-2022-34674
CVE	CVE-2022-34676	CVE-2022-34676	https://nvd.nist.gov/vuln/detail/CVE-2022-34676
CVE	CVE-2022-34677	CVE-2022-34677	https://nvd.nist.gov/vuln/detail/CVE-2022-34677
CVE	CVE-2022-34678	CVE-2022-34678	https://nvd.nist.gov/vuln/detail/CVE-2022-34678
CVE	CVE-2022-34679	CVE-2022-34679	https://nvd.nist.gov/vuln/detail/CVE-2022-34679
CVE	CVE-2022-34680	CVE-2022-34680	https://nvd.nist.gov/vuln/detail/CVE-2022-34680
CVE	CVE-2022-34682	CVE-2022-34682	https://nvd.nist.gov/vuln/detail/CVE-2022-34682
CVE	CVE-2022-34684	CVE-2022-34684	https://nvd.nist.gov/vuln/detail/CVE-2022-34684
CVE	CVE-2022-42254	CVE-2022-42254	https://nvd.nist.gov/vuln/detail/CVE-2022-42254
CVE	CVE-2022-42255	CVE-2022-42255	https://nvd.nist.gov/vuln/detail/CVE-2022-42255
CVE	CVE-2022-42256	CVE-2022-42256	https://nvd.nist.gov/vuln/detail/CVE-2022-42256
CVE	CVE-2022-42257	CVE-2022-42257	https://nvd.nist.gov/vuln/detail/CVE-2022-42257
CVE	CVE-2022-42258	CVE-2022-42258	https://nvd.nist.gov/vuln/detail/CVE-2022-42258
CVE	CVE-2022-42259	CVE-2022-42259	https://nvd.nist.gov/vuln/detail/CVE-2022-42259
CVE	CVE-2022-42260	CVE-2022-42260	https://nvd.nist.gov/vuln/detail/CVE-2022-42260
CVE	CVE-2022-42261	CVE-2022-42261	https://nvd.nist.gov/vuln/detail/CVE-2022-42261
CVE	CVE-2022-42263	CVE-2022-42263	https://nvd.nist.gov/vuln/detail/CVE-2022-42263
CVE	CVE-2022-42264	CVE-2022-42264	https://nvd.nist.gov/vuln/detail/CVE-2022-42264
CVE	CVE-2022-42265	CVE-2022-42265	https://nvd.nist.gov/vuln/detail/CVE-2022-42265
CVE	CVE-2023-0180	CVE-2023-0180	https://nvd.nist.gov/vuln/detail/CVE-2023-0180
CVE	CVE-2023-0181	CVE-2023-0181	https://nvd.nist.gov/vuln/detail/CVE-2023-0181
CVE	CVE-2023-0183	CVE-2023-0183	https://nvd.nist.gov/vuln/detail/CVE-2023-0183
CVE	CVE-2023-0184	CVE-2023-0184	https://nvd.nist.gov/vuln/detail/CVE-2023-0184
CVE	CVE-2023-0185	CVE-2023-0185	https://nvd.nist.gov/vuln/detail/CVE-2023-0185
CVE	CVE-2023-0187	CVE-2023-0187	https://nvd.nist.gov/vuln/detail/CVE-2023-0187
CVE	CVE-2023-0188	CVE-2023-0188	https://nvd.nist.gov/vuln/detail/CVE-2023-0188
CVE	CVE-2023-0189	CVE-2023-0189	https://nvd.nist.gov/vuln/detail/CVE-2023-0189
CVE	CVE-2023-0190	CVE-2023-0190	https://nvd.nist.gov/vuln/detail/CVE-2023-0190
CVE	CVE-2023-0191	CVE-2023-0191	https://nvd.nist.gov/vuln/detail/CVE-2023-0191
CVE	CVE-2023-0194	CVE-2023-0194	https://nvd.nist.gov/vuln/detail/CVE-2023-0194
CVE	CVE-2023-0195	CVE-2023-0195	https://nvd.nist.gov/vuln/detail/CVE-2023-0195
CVE	CVE-2023-0198	CVE-2023-0198	https://nvd.nist.gov/vuln/detail/CVE-2023-0198
CVE	CVE-2023-0199	CVE-2023-0199	https://nvd.nist.gov/vuln/detail/CVE-2023-0199
Bugzilla	764512	Bugzilla #764512	https://bugs.gentoo.org/show_bug.cgi?id=764512
Bugzilla	784596	Bugzilla #784596	https://bugs.gentoo.org/show_bug.cgi?id=784596
Bugzilla	803389	Bugzilla #803389	https://bugs.gentoo.org/show_bug.cgi?id=803389
Bugzilla	832867	Bugzilla #832867	https://bugs.gentoo.org/show_bug.cgi?id=832867
Bugzilla	845063	Bugzilla #845063	https://bugs.gentoo.org/show_bug.cgi?id=845063
Bugzilla	866527	Bugzilla #866527	https://bugs.gentoo.org/show_bug.cgi?id=866527
Bugzilla	881341	Bugzilla #881341	https://bugs.gentoo.org/show_bug.cgi?id=881341
Bugzilla	884045	Bugzilla #884045	https://bugs.gentoo.org/show_bug.cgi?id=884045
Bugzilla	903614	Bugzilla #903614	https://bugs.gentoo.org/show_bug.cgi?id=903614

Type	Package URL	Namespace	Name / Product	Version	Distribution / Platform
Affected	pkg:ebuild/x11-drivers/nvidia-drivers?distro=gentoo	x11-drivers	nvidia-drivers	< 470.182.03	gentoo
Affected	pkg:ebuild/x11-drivers/nvidia-drivers?distro=gentoo	x11-drivers	nvidia-drivers	< 515.105.01	gentoo
Affected	pkg:ebuild/x11-drivers/nvidia-drivers?distro=gentoo	x11-drivers	nvidia-drivers	< 525.105.17	gentoo
Affected	pkg:ebuild/x11-drivers/nvidia-drivers?distro=gentoo	x11-drivers	nvidia-drivers	< 530.41.03	gentoo
Unaffected	pkg:ebuild/x11-drivers/nvidia-drivers?distro=gentoo	x11-drivers	nvidia-drivers	>= 470.182.03	gentoo
Unaffected	pkg:ebuild/x11-drivers/nvidia-drivers?distro=gentoo	x11-drivers	nvidia-drivers	>= 515.105.01	gentoo
Unaffected	pkg:ebuild/x11-drivers/nvidia-drivers?distro=gentoo	x11-drivers	nvidia-drivers	>= 525.105.17	gentoo
Unaffected	pkg:ebuild/x11-drivers/nvidia-drivers?distro=gentoo	x11-drivers	nvidia-drivers	>= 530.41.03	gentoo

# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	Exploits	PoC	Pubblication Date	Modification Date
# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	PoC	Pubblication Date	Modification Date