USN-2747-1: NVIDIA graphics drivers vulnerability | Ubuntu security notices

Packages

jockey - user interface and desktop integration for driver management
nvidia-graphics-drivers-304 - NVIDIA binary X.Org driver
nvidia-graphics-drivers-304-updates - NVIDIA binary X.Org driver
nvidia-graphics-drivers-340 - NVIDIA binary X.Org driver
nvidia-graphics-drivers-340-updates - NVIDIA binary X.Org driver
nvidia-graphics-drivers-346 - NVIDIA binary X.Org driver
nvidia-graphics-drivers-346-updates - NVIDIA binary X.Org driver

Details

Dario Weisser discovered that the NVIDIA graphics drivers incorrectly
handled certain IOCTL writes. A local attacker could use this issue to
possibly gain root privileges.

Update instructions

After a standard system update you need to reboot your computer to make all the necessary changes.

Learn more about how to get the fixes.

Ubuntu Release	Package Version
15.04 vivid	nvidia-304 – 304.128-0ubuntu0.1
	nvidia-304-updates – 304.128-0ubuntu0.1
	nvidia-340 – 340.93-0ubuntu0.1
	nvidia-340-updates – 340.93-0ubuntu0.1
	nvidia-346 – 346.96-0ubuntu0.1
	nvidia-346-updates – 346.96-0ubuntu0.1
14.04 trusty	nvidia-304 – 304.128-0ubuntu0.0.1
	nvidia-304-updates – 304.128-0ubuntu0.0.1
	nvidia-340 – 340.93-0ubuntu0.0.1
	nvidia-340-updates – 340.93-0ubuntu0.0.1
	nvidia-346 – 346.96-0ubuntu0.0.1
	nvidia-346-updates – 346.96-0ubuntu0.0.1
12.04 precise	jockey-common – 0.9.7-0ubuntu7.16
	nvidia-304 – 304.128-0ubuntu0.0.0.1
	nvidia-304-updates – 304.128-0ubuntu0.0.0.1
	nvidia-340 – 340.93-0ubuntu0.0.0.1
	nvidia-340-updates – 340.93-0ubuntu0.0.0.1

Reduce your security exposure

Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines.

Get Ubuntu Pro

References

CVE-2015-5950

CVE-2015-5950