USN-5547-1: NVIDIA graphics drivers vulnerabilities

Packages

nvidia-graphics-drivers-390 - NVIDIA binary X.Org driver
nvidia-graphics-drivers-450-server - NVIDIA server driver
nvidia-graphics-drivers-470 - NVIDIA binary X.Org driver
nvidia-graphics-drivers-470-server - NVIDIA server driver
nvidia-graphics-drivers-510 - NVIDIA binary X.Org driver
nvidia-graphics-drivers-510-server - NVIDIA server driver
nvidia-graphics-drivers-515 - NVIDIA binary X.Org driver
nvidia-graphics-drivers-515-server - NVIDIA server driver

Details

Le Wu discovered that the NVIDIA graphics drivers did not properly perform
input validation in some situations. A local user could use this to cause a
denial of service or possibly execute arbitrary code. (CVE-2022-31607)

Tal Lossos discovered that the NVIDIA graphics drivers incorrectly handled
certain memory operations, leading to a null-pointer dereference. A local
attacker could use this to cause a denial of service. (CVE-2022-31615)

Artem S. Tashkinov discovered that the NVIDIA graphics drivers Dynamic
Boost D-Bus component did not properly restrict access to its endpoint.
When enabled in non-default configurations, a local attacker could use this
to cause a denial of service or possibly execute arbitrary code.
(CVE-2022-31608)

Le Wu discovered that the NVIDIA graphics drivers did not properly perform
input validation in some situations. A local user could use this to cause a
denial of service or possibly execute arbitrary code. (CVE-2022-31607)

Tal Lossos discovered that the NVIDIA graphics drivers incorrectly handled
certain memory operations, leading to a null-pointer dereference. A local
attacker could use this to cause a denial of service. (CVE-2022-31615)

Artem S. Tashkinov discovered that the NVIDIA graphics drivers Dynamic
Boost D-Bus component did not properly restrict access to its endpoint.
When enabled in non-default configurations, a local attacker could use this
to cause a denial of service or possibly execute arbitrary code.
(CVE-2022-31608)

Update instructions

After a standard system update you need to reboot your computer to make all the necessary changes.

Learn more about how to get the fixes.

Ubuntu Release	Package Version
22.04 jammy	xserver-xorg-video-nvidia-450-server – 450.203.03-0ubuntu0.22.04.1
	xserver-xorg-video-nvidia-460 – 470.141.03-0ubuntu0.22.04.1
	xserver-xorg-video-nvidia-465 – 470.141.03-0ubuntu0.22.04.1
	xserver-xorg-video-nvidia-510-server – 510.85.02-0ubuntu0.22.04.1
	xserver-xorg-video-nvidia-510 – 510.85.02-0ubuntu0.22.04.1
	xserver-xorg-video-nvidia-470-server – 470.141.03-0ubuntu0.22.04.1
	xserver-xorg-video-nvidia-390 – 390.154-0ubuntu0.22.04.1
	xserver-xorg-video-nvidia-440-server – 450.203.03-0ubuntu0.22.04.1
	xserver-xorg-video-nvidia-515-server – 515.65.01-0ubuntu0.22.04.1
	xserver-xorg-video-nvidia-515 – 515.65.01-0ubuntu0.22.04.1
	xserver-xorg-video-nvidia-470 – 470.141.03-0ubuntu0.22.04.1
	xserver-xorg-video-nvidia-460-server – 470.141.03-0ubuntu0.22.04.1
	xserver-xorg-video-nvidia-495 – 510.85.02-0ubuntu0.22.04.1
20.04 focal	xserver-xorg-video-nvidia-450-server – 450.203.03-0ubuntu0.20.04.1
	xserver-xorg-video-nvidia-460 – 470.141.03-0ubuntu0.20.04.1
	xserver-xorg-video-nvidia-465 – 470.141.03-0ubuntu0.20.04.1
	xserver-xorg-video-nvidia-510-server – 510.85.02-0ubuntu0.20.04.1
	xserver-xorg-video-nvidia-510 – 510.85.02-0ubuntu0.20.04.1
	xserver-xorg-video-nvidia-470-server – 470.141.03-0ubuntu0.20.04.1
	xserver-xorg-video-nvidia-390 – 390.154-0ubuntu0.20.04.1
	xserver-xorg-video-nvidia-440-server – 450.203.03-0ubuntu0.20.04.1
	xserver-xorg-video-nvidia-515-server – 515.65.01-0ubuntu0.20.04.1
	xserver-xorg-video-nvidia-515 – 515.65.01-0ubuntu0.20.04.1
	xserver-xorg-video-nvidia-470 – 470.141.03-0ubuntu0.20.04.1
	xserver-xorg-video-nvidia-460-server – 470.141.03-0ubuntu0.20.04.1
	xserver-xorg-video-nvidia-495 – 510.85.02-0ubuntu0.20.04.1
18.04 bionic	xserver-xorg-video-nvidia-450-server – 450.203.03-0ubuntu0.18.04.1
	xserver-xorg-video-nvidia-460 – 470.141.03-0ubuntu0.18.04.1
	xserver-xorg-video-nvidia-465 – 470.141.03-0ubuntu0.18.04.1
	xserver-xorg-video-nvidia-510-server – 510.85.02-0ubuntu0.18.04.1
	xserver-xorg-video-nvidia-510 – 510.85.02-0ubuntu0.18.04.1
	xserver-xorg-video-nvidia-470-server – 470.141.03-0ubuntu0.18.04.1
	xserver-xorg-video-nvidia-390 – 390.154-0ubuntu0.18.04.1
	xserver-xorg-video-nvidia-440-server – 450.203.03-0ubuntu0.18.04.1
	xserver-xorg-video-nvidia-515-server – 515.65.01-0ubuntu0.18.04.1
	xserver-xorg-video-nvidia-515 – 515.65.01-0ubuntu0.18.04.1
	xserver-xorg-video-nvidia-470 – 470.141.03-0ubuntu0.18.04.1
	xserver-xorg-video-nvidia-460-server – 470.141.03-0ubuntu0.18.04.1
	xserver-xorg-video-nvidia-495 – 510.85.02-0ubuntu0.18.04.1

Reduce your security exposure

Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines.

Get Ubuntu Pro

Packages

Details

Update instructions

Reduce your security exposure

References