Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.bugs.rc > #364816 > unrolled thread

Bug#1072792: nvidia-graphics-drivers: CVE-2024-0090, CVE-2024-0091, CVE-2024-0092

Started byAndreas Beckmann <anbe@debian.org>
First post2024-06-08 00:10 +0200
Last post2024-06-20 21:00 +0200
Articles 11 — 2 participants

Back to article view | Back to linux.debian.bugs.rc

Contents

  Bug#1072792: nvidia-graphics-drivers: CVE-2024-0090, CVE-2024-0091, CVE-2024-0092 Andreas Beckmann <anbe@debian.org> - 2024-06-08 00:10 +0200
    Bug#1072798: marked as done (nvidia-graphics-drivers-tesla-470:  CVE-2024-0090, CVE-2024-0092) "Debian Bug Tracking System" <owner@bugs.debian.org> - 2024-06-10 11:00 +0200
    Bug#1072792: marked as done (nvidia-graphics-drivers:  CVE-2024-0090, CVE-2024-0091, CVE-2024-0092) "Debian Bug Tracking System" <owner@bugs.debian.org> - 2024-06-13 23:30 +0200
    Bug#1072792: marked as done (nvidia-graphics-drivers:  CVE-2024-0090, CVE-2024-0091, CVE-2024-0092) "Debian Bug Tracking System" <owner@bugs.debian.org> - 2024-06-14 11:40 +0200
    Bug#1072800: marked as done (nvidia-open-gpu-kernel-modules:  CVE-2024-0090, CVE-2024-0091, CVE-2024-0092) "Debian Bug Tracking System" <owner@bugs.debian.org> - 2024-06-19 05:30 +0200
    Bug#1072792: marked as done (nvidia-graphics-drivers:  CVE-2024-0090, CVE-2024-0091, CVE-2024-0092) "Debian Bug Tracking System" <owner@bugs.debian.org> - 2024-06-20 20:40 +0200
    Bug#1072798: marked as done (nvidia-graphics-drivers-tesla-470:  CVE-2024-0090, CVE-2024-0092) "Debian Bug Tracking System" <owner@bugs.debian.org> - 2024-06-20 20:40 +0200
    Bug#1072800: marked as done (nvidia-open-gpu-kernel-modules:  CVE-2024-0090, CVE-2024-0091, CVE-2024-0092) "Debian Bug Tracking System" <owner@bugs.debian.org> - 2024-06-20 20:40 +0200
    Bug#1072792: marked as done (nvidia-graphics-drivers:  CVE-2024-0090, CVE-2024-0091, CVE-2024-0092) "Debian Bug Tracking System" <owner@bugs.debian.org> - 2024-06-20 20:40 +0200
    Bug#1072798: marked as done (nvidia-graphics-drivers-tesla-470:  CVE-2024-0090, CVE-2024-0092) "Debian Bug Tracking System" <owner@bugs.debian.org> - 2024-06-20 21:00 +0200
    Bug#1072792: marked as done (nvidia-graphics-drivers:  CVE-2024-0090, CVE-2024-0091, CVE-2024-0092) "Debian Bug Tracking System" <owner@bugs.debian.org> - 2024-06-20 21:00 +0200

#364816 — Bug#1072792: nvidia-graphics-drivers: CVE-2024-0090, CVE-2024-0091, CVE-2024-0092

FromAndreas Beckmann <anbe@debian.org>
Date2024-06-08 00:10 +0200
SubjectBug#1072792: nvidia-graphics-drivers: CVE-2024-0090, CVE-2024-0091, CVE-2024-0092
Message-ID<IMPWx-1lDa-3@gated-at.bofh.it>
Source: nvidia-graphics-drivers
Severity: serious
Tags: security upstream
X-Debbugs-Cc: Debian Security Team <team@security.debian.org>
Control: clone -1 -2 -3 -4 -5 -6 -7 -8 -9
Control: reassign -2 src:nvidia-graphics-drivers-legacy-340xx 340.76-6
Control: retitle -2 nvidia-graphics-drivers-legacy-340xx: CVE-2024-0090, CVE-2024-0092
Control: tag -2 + wontfix
Control: reassign -3 src:nvidia-graphics-drivers-legacy-390xx 390.48-4
Control: retitle -3 nvidia-graphics-drivers-legacy-390xx: CVE-2024-0090, CVE-2024-0092
Control: tag -3 + wontfix
Control: reassign -4 src:nvidia-graphics-drivers-tesla-418 418.87.01-1
Control: retitle -4 nvidia-graphics-drivers-tesla-418: CVE-2024-0090, CVE-2024-0092
Control: tag -4 + wontfix
Control: reassign -5 src:nvidia-graphics-drivers-tesla-450 450.51.05-1
Control: retitle -5 nvidia-graphics-drivers-tesla-450: CVE-2024-0090, CVE-2024-0092
Control: tag -5 + wontfix
Control: close -5 450.248.02-4
Control: reassign -6 src:nvidia-graphics-drivers-tesla-460 460.32.03-1
Control: retitle -6 nvidia-graphics-drivers-tesla-460: CVE-2024-0090, CVE-2024-0092
Control: tag -6 + wontfix
Control: close -6 460.106.00-3
Control: reassign -7 src:nvidia-graphics-drivers-tesla-470 470.57.02-1
Control: retitle -7 nvidia-graphics-drivers-tesla-470: CVE-2024-0090, CVE-2024-0092
Control: reassign -8 src:nvidia-graphics-drivers-tesla 510.85.02-1
Control: retitle -8 nvidia-graphics-drivers-tesla: CVE-2024-0090, CVE-2024-0092
Control: found -8 515.48.07-1
Control: found -8 525.60.13-1
Control: tag -8 + wontfix
Control: close -8 525.147.05-6
Control: reassign -9 src:nvidia-open-gpu-kernel-modules 515.43.04-1
Control: retitle -9 nvidia-open-gpu-kernel-modules: CVE-2024-0090, CVE-2024-0091, CVE-2024-0092
Control: found -9 520.56.06-1
Control: found -9 525.85.12-1
Control: found -9 530.30.02-1
Control: found -9 535.43.02-1
Control: found -9 545.23.06-1
Control: found -9 550.40.07-1
Control: found -9 555.42.02-1
Control: found -1 340.24-1
Control: found -1 343.22-1
Control: found -1 396.18-1
Control: found -1 430.14-1
Control: found -1 455.23.04-1
Control: found -1 465.24.02-1
Control: found -1 495.44-1
Control: found -1 515.48.07-1
Control: found -1 520.56.06-1
Control: found -1 525.53-1
Control: found -1 530.30.02-1
Control: found -1 535.43.02-1
Control: found -1 545.23.06-1
Control: found -1 550.40.07-1
Control: found -1 555.42.02-1

https://nvidia.custhelp.com/app/answers/detail/a_id/5551

CVE-2024-0090 	NVIDIA GPU driver for Windows and Linux contains a
vulnerability where a user can cause an out-of-bounds write. A
successful exploit of this vulnerability might lead to code execution,
denial of service, escalation of privileges, information disclosure, and
data tampering.

CVE-2024-0091 	NVIDIA GPU Display Driver for Windows and Linux contains
a vulnerability where a user can cause an untrusted pointer dereference
by executing a driver API. A successful exploit of this vulnerability
might lead to denial of service, information disclosure, and data
tampering.

CVE-2024-0092 	NVIDIA GPU Driver for Windows and Linux contains a
vulnerability where an improper check or improper handling of exception
conditions might lead to denial of service.

Linux Driver Branch 	CVE IDs Addressed
R555, R550 		CVE-2024-0090, CVE-2024-0091, CVE-2024-0092
R535, R470 		CVE-2024-0090, CVE-2024-0092

Driver Branch 	Affected Driver Versions 			Updated Driver Version
R555 		All driver versions prior to 555.52.04 		555.52.04
R550 		All driver versions prior to 550.90.07 		550.90.07
R535	 	All driver versions prior to 535.183.01 	535.183.01
R470 		All driver versions prior to 470.256.02 	470.256.02


Andreas

[toc] | [next] | [standalone]

#364912 — Bug#1072798: marked as done (nvidia-graphics-drivers-tesla-470: CVE-2024-0090, CVE-2024-0092)

From"Debian Bug Tracking System" <owner@bugs.debian.org>
Date2024-06-10 11:00 +0200
SubjectBug#1072798: marked as done (nvidia-graphics-drivers-tesla-470: CVE-2024-0090, CVE-2024-0092)
Message-ID<INJ2F-1Tal-3@gated-at.bofh.it>
In reply to#364816

[Multipart message — attachments visible in raw view] — view raw

Your message dated Mon, 10 Jun 2024 08:49:49 +0000
with message-id <E1sGair-00GHIj-KG@fasolo.debian.org>
and subject line Bug#1072798: fixed in nvidia-graphics-drivers-tesla-470 470.256.02-1
has caused the Debian Bug report #1072798,
regarding nvidia-graphics-drivers-tesla-470: CVE-2024-0090, CVE-2024-0092
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
1072798: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1072798
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems

[toc] | [prev] | [next] | [standalone]

#365173 — Bug#1072792: marked as done (nvidia-graphics-drivers: CVE-2024-0090, CVE-2024-0091, CVE-2024-0092)

From"Debian Bug Tracking System" <owner@bugs.debian.org>
Date2024-06-13 23:30 +0200
SubjectBug#1072792: marked as done (nvidia-graphics-drivers: CVE-2024-0090, CVE-2024-0091, CVE-2024-0092)
Message-ID<IP0b7-2JVY-13@gated-at.bofh.it>
In reply to#364816

[Multipart message — attachments visible in raw view] — view raw

Your message dated Thu, 13 Jun 2024 21:17:35 +0000
with message-id <E1sHrp9-00GJCA-Br@fasolo.debian.org>
and subject line Bug#1072792: fixed in nvidia-graphics-drivers 470.256.02-1
has caused the Debian Bug report #1072792,
regarding nvidia-graphics-drivers: CVE-2024-0090, CVE-2024-0091, CVE-2024-0092
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
1072792: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1072792
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems

[toc] | [prev] | [next] | [standalone]

#365205 — Bug#1072792: marked as done (nvidia-graphics-drivers: CVE-2024-0090, CVE-2024-0091, CVE-2024-0092)

From"Debian Bug Tracking System" <owner@bugs.debian.org>
Date2024-06-14 11:40 +0200
SubjectBug#1072792: marked as done (nvidia-graphics-drivers: CVE-2024-0090, CVE-2024-0091, CVE-2024-0092)
Message-ID<IPbzz-2Rd5-13@gated-at.bofh.it>
In reply to#364816

[Multipart message — attachments visible in raw view] — view raw

Your message dated Fri, 14 Jun 2024 09:36:00 +0000
with message-id <E1sI3Lk-001JAq-O9@fasolo.debian.org>
and subject line Bug#1072792: fixed in nvidia-graphics-drivers 535.183.01-1
has caused the Debian Bug report #1072792,
regarding nvidia-graphics-drivers: CVE-2024-0090, CVE-2024-0091, CVE-2024-0092
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
1072792: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1072792
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems

[toc] | [prev] | [next] | [standalone]

#365553 — Bug#1072800: marked as done (nvidia-open-gpu-kernel-modules: CVE-2024-0090, CVE-2024-0091, CVE-2024-0092)

From"Debian Bug Tracking System" <owner@bugs.debian.org>
Date2024-06-19 05:30 +0200
SubjectBug#1072800: marked as done (nvidia-open-gpu-kernel-modules: CVE-2024-0090, CVE-2024-0091, CVE-2024-0092)
Message-ID<IQUbf-3WxH-1@gated-at.bofh.it>
In reply to#364816

[Multipart message — attachments visible in raw view] — view raw

Your message dated Wed, 19 Jun 2024 03:19:45 +0000
with message-id <E1sJlrN-003brv-Hm@fasolo.debian.org>
and subject line Bug#1072800: fixed in nvidia-open-gpu-kernel-modules 535.183.01-1
has caused the Debian Bug report #1072800,
regarding nvidia-open-gpu-kernel-modules: CVE-2024-0090, CVE-2024-0091, CVE-2024-0092
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
1072800: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1072800
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems

[toc] | [prev] | [next] | [standalone]

#365635 — Bug#1072792: marked as done (nvidia-graphics-drivers: CVE-2024-0090, CVE-2024-0091, CVE-2024-0092)

From"Debian Bug Tracking System" <owner@bugs.debian.org>
Date2024-06-20 20:40 +0200
SubjectBug#1072792: marked as done (nvidia-graphics-drivers: CVE-2024-0090, CVE-2024-0091, CVE-2024-0092)
Message-ID<IRuRr-4kNZ-7@gated-at.bofh.it>
In reply to#364816

[Multipart message — attachments visible in raw view] — view raw

Your message dated Thu, 20 Jun 2024 18:32:32 +0000
with message-id <E1sKMaG-00BrDM-88@fasolo.debian.org>
and subject line Bug#1072792: fixed in nvidia-graphics-drivers-tesla-470 470.256.02-1~deb12u1
has caused the Debian Bug report #1072792,
regarding nvidia-graphics-drivers: CVE-2024-0090, CVE-2024-0091, CVE-2024-0092
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
1072792: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1072792
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems

[toc] | [prev] | [next] | [standalone]

#365636 — Bug#1072798: marked as done (nvidia-graphics-drivers-tesla-470: CVE-2024-0090, CVE-2024-0092)

From"Debian Bug Tracking System" <owner@bugs.debian.org>
Date2024-06-20 20:40 +0200
SubjectBug#1072798: marked as done (nvidia-graphics-drivers-tesla-470: CVE-2024-0090, CVE-2024-0092)
Message-ID<IRuRr-4kNZ-27@gated-at.bofh.it>
In reply to#364816

[Multipart message — attachments visible in raw view] — view raw

Your message dated Thu, 20 Jun 2024 18:32:32 +0000
with message-id <E1sKMaG-00BrDS-AS@fasolo.debian.org>
and subject line Bug#1072798: fixed in nvidia-graphics-drivers-tesla-470 470.256.02-1~deb12u1
has caused the Debian Bug report #1072798,
regarding nvidia-graphics-drivers-tesla-470: CVE-2024-0090, CVE-2024-0092
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
1072798: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1072798
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems

[toc] | [prev] | [next] | [standalone]

#365637 — Bug#1072800: marked as done (nvidia-open-gpu-kernel-modules: CVE-2024-0090, CVE-2024-0091, CVE-2024-0092)

From"Debian Bug Tracking System" <owner@bugs.debian.org>
Date2024-06-20 20:40 +0200
SubjectBug#1072800: marked as done (nvidia-open-gpu-kernel-modules: CVE-2024-0090, CVE-2024-0091, CVE-2024-0092)
Message-ID<IRuRt-4kNZ-67@gated-at.bofh.it>
In reply to#364816

[Multipart message — attachments visible in raw view] — view raw

Your message dated Thu, 20 Jun 2024 18:32:32 +0000
with message-id <E1sKMaG-00BrDk-OU@fasolo.debian.org>
and subject line Bug#1072800: fixed in nvidia-open-gpu-kernel-modules 535.183.01-1~deb12u1
has caused the Debian Bug report #1072800,
regarding nvidia-open-gpu-kernel-modules: CVE-2024-0090, CVE-2024-0091, CVE-2024-0092
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
1072800: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1072800
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems

[toc] | [prev] | [next] | [standalone]

#365639 — Bug#1072792: marked as done (nvidia-graphics-drivers: CVE-2024-0090, CVE-2024-0091, CVE-2024-0092)

From"Debian Bug Tracking System" <owner@bugs.debian.org>
Date2024-06-20 20:40 +0200
SubjectBug#1072792: marked as done (nvidia-graphics-drivers: CVE-2024-0090, CVE-2024-0091, CVE-2024-0092)
Message-ID<IRuRt-4kNZ-85@gated-at.bofh.it>
In reply to#364816

[Multipart message — attachments visible in raw view] — view raw

Your message dated Thu, 20 Jun 2024 18:32:29 +0000
with message-id <E1sKMaD-00BrCz-LL@fasolo.debian.org>
and subject line Bug#1072792: fixed in nvidia-graphics-drivers 535.183.01-1~deb12u1
has caused the Debian Bug report #1072792,
regarding nvidia-graphics-drivers: CVE-2024-0090, CVE-2024-0091, CVE-2024-0092
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
1072792: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1072792
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems

[toc] | [prev] | [next] | [standalone]

#365641 — Bug#1072798: marked as done (nvidia-graphics-drivers-tesla-470: CVE-2024-0090, CVE-2024-0092)

From"Debian Bug Tracking System" <owner@bugs.debian.org>
Date2024-06-20 21:00 +0200
SubjectBug#1072798: marked as done (nvidia-graphics-drivers-tesla-470: CVE-2024-0090, CVE-2024-0092)
Message-ID<IRvaN-4kVl-7@gated-at.bofh.it>
In reply to#364816

[Multipart message — attachments visible in raw view] — view raw

Your message dated Thu, 20 Jun 2024 18:47:44 +0000
with message-id <E1sKMoy-00Bu2x-RF@fasolo.debian.org>
and subject line Bug#1072798: fixed in nvidia-graphics-drivers-tesla-470 470.256.02-1~deb11u1
has caused the Debian Bug report #1072798,
regarding nvidia-graphics-drivers-tesla-470: CVE-2024-0090, CVE-2024-0092
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
1072798: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1072798
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems

[toc] | [prev] | [next] | [standalone]

#365642 — Bug#1072792: marked as done (nvidia-graphics-drivers: CVE-2024-0090, CVE-2024-0091, CVE-2024-0092)

From"Debian Bug Tracking System" <owner@bugs.debian.org>
Date2024-06-20 21:00 +0200
SubjectBug#1072792: marked as done (nvidia-graphics-drivers: CVE-2024-0090, CVE-2024-0091, CVE-2024-0092)
Message-ID<IRvaN-4kVl-11@gated-at.bofh.it>
In reply to#364816

[Multipart message — attachments visible in raw view] — view raw

Your message dated Thu, 20 Jun 2024 18:47:44 +0000
with message-id <E1sKMoy-00Bu2s-PE@fasolo.debian.org>
and subject line Bug#1072792: fixed in nvidia-graphics-drivers-tesla-470 470.256.02-1~deb11u1
has caused the Debian Bug report #1072792,
regarding nvidia-graphics-drivers: CVE-2024-0090, CVE-2024-0091, CVE-2024-0092
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
1072792: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1072792
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems

[toc] | [prev] | [standalone]

Back to top | Article view | linux.debian.bugs.rc

csiph-web