SUSE-SU-2023:4427-1

See a problem?
Import Source
https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2023:4427-1.json
JSON Data
https://api.osv.dev/v1/vulns/SUSE-SU-2023:4427-1
Related
Published
2023-11-13T14:33:58Z
Modified
2023-11-13T14:33:58Z
Summary
Security update for kernel-firmware-nvidia-gspx-G06, nvidia-open-driver-G06-signed
Details

This update for kernel-firmware-nvidia-gspx-G06, nvidia-open-driver-G06-signed fixes the following issues:

Security issue fixed:

  • CVE-2023-31022: Fixed NULL ptr deref in kernel module layer

Changes in kernel-firmware-nvidia-gspx-G06:

  • update firmware to version 535.129.03
  • update firmware to version 535.113.01

Changes in nvidia-open-driver-G06-signed:

  • Update to version 535.129.03

  • Add a devel package so other modules can be built against this one. [jira#PED-4964]

  • disabled build of nvidia-peermem module; it's no longer needed and never worked anyway (it was only a stub) [bsc#1211892]
  • preamble: added conflict to nvidia-gfxG05-kmp to prevent users from accidently installing conflicting proprietary kernelspace drivers from CUDA repository

  • Update to version 535.113.01

  • kmp-post.sh/kmp-postun.sh:

    • add/remove nosimplefb=1 kernel option in order to fix Linux console also on sle15-sp6/Leap 15.6 kernel, which will come with simpledrm support
References

Affected packages

SUSE:Linux Enterprise Micro 5.5 / kernel-firmware-nvidia-gspx-G06

Package

Name
kernel-firmware-nvidia-gspx-G06
Purl
purl:rpm/suse/kernel-firmware-nvidia-gspx-G06&distro=SUSE%20Linux%20Enterprise%20Micro%205.5

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
535.129.03-150500.11.9.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-firmware-nvidia-gspx-G06": "535.129.03-150500.11.9.1",
            "nvidia-open-driver-G06-signed-kmp-default": "535.129.03_k5.14.21_150500.55.31-150500.3.13.1"
        }
    ]
}

SUSE:Linux Enterprise Micro 5.5 / nvidia-open-driver-G06-signed

Package

Name
nvidia-open-driver-G06-signed
Purl
purl:rpm/suse/nvidia-open-driver-G06-signed&distro=SUSE%20Linux%20Enterprise%20Micro%205.5

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
535.129.03-150500.3.13.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-firmware-nvidia-gspx-G06": "535.129.03-150500.11.9.1",
            "nvidia-open-driver-G06-signed-kmp-default": "535.129.03_k5.14.21_150500.55.31-150500.3.13.1"
        }
    ]
}

SUSE:Linux Enterprise Module for Basesystem 15 SP5 / kernel-firmware-nvidia-gspx-G06

Package

Name
kernel-firmware-nvidia-gspx-G06
Purl
purl:rpm/suse/kernel-firmware-nvidia-gspx-G06&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP5

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
535.129.03-150500.11.9.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-firmware-nvidia-gspx-G06": "535.129.03-150500.11.9.1",
            "nvidia-open-driver-G06-signed-64kb-devel": "535.129.03-150500.3.13.1",
            "nvidia-open-driver-G06-signed-default-devel": "535.129.03-150500.3.13.1",
            "nvidia-open-driver-G06-signed-kmp-64kb": "535.129.03_k5.14.21_150500.55.31-150500.3.13.1",
            "nvidia-open-driver-G06-signed-kmp-default": "535.129.03_k5.14.21_150500.55.31-150500.3.13.1"
        }
    ]
}

SUSE:Linux Enterprise Module for Basesystem 15 SP5 / nvidia-open-driver-G06-signed

Package

Name
nvidia-open-driver-G06-signed
Purl
purl:rpm/suse/nvidia-open-driver-G06-signed&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP5

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
535.129.03-150500.3.13.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-firmware-nvidia-gspx-G06": "535.129.03-150500.11.9.1",
            "nvidia-open-driver-G06-signed-64kb-devel": "535.129.03-150500.3.13.1",
            "nvidia-open-driver-G06-signed-default-devel": "535.129.03-150500.3.13.1",
            "nvidia-open-driver-G06-signed-kmp-64kb": "535.129.03_k5.14.21_150500.55.31-150500.3.13.1",
            "nvidia-open-driver-G06-signed-kmp-default": "535.129.03_k5.14.21_150500.55.31-150500.3.13.1"
        }
    ]
}

SUSE:Linux Enterprise Module for Public Cloud 15 SP5 / nvidia-open-driver-G06-signed

Package

Name
nvidia-open-driver-G06-signed
Purl
purl:rpm/suse/nvidia-open-driver-G06-signed&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Public%20Cloud%2015%20SP5

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
535.129.03-150500.3.13.1

Ecosystem specific

{
    "binaries": [
        {
            "nvidia-open-driver-G06-signed-azure-devel": "535.129.03-150500.3.13.1",
            "nvidia-open-driver-G06-signed-kmp-azure": "535.129.03_k5.14.21_150500.33.20-150500.3.13.1"
        }
    ]
}

openSUSE:Leap 15.5 / kernel-firmware-nvidia-gspx-G06

Package

Name
kernel-firmware-nvidia-gspx-G06
Purl
purl:rpm/suse/kernel-firmware-nvidia-gspx-G06&distro=openSUSE%20Leap%2015.5

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
535.129.03-150500.11.9.1

Ecosystem specific

{
    "binaries": [
        {
            "nvidia-open-driver-G06-signed-azure-devel": "535.129.03-150500.3.13.1",
            "nvidia-open-driver-G06-signed-default-devel": "535.129.03-150500.3.13.1",
            "nvidia-open-driver-G06-signed-kmp-default": "535.129.03_k5.14.21_150500.55.31-150500.3.13.1",
            "kernel-firmware-nvidia-gspx-G06": "535.129.03-150500.11.9.1",
            "nvidia-open-driver-G06-signed-kmp-azure": "535.129.03_k5.14.21_150500.33.20-150500.3.13.1",
            "nvidia-open-driver-G06-signed-kmp-64kb": "535.129.03_k5.14.21_150500.55.31-150500.3.13.1",
            "nvidia-open-driver-G06-signed-64kb-devel": "535.129.03-150500.3.13.1"
        }
    ]
}

openSUSE:Leap 15.5 / nvidia-open-driver-G06-signed

Package

Name
nvidia-open-driver-G06-signed
Purl
purl:rpm/suse/nvidia-open-driver-G06-signed&distro=openSUSE%20Leap%2015.5

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
535.129.03-150500.3.13.1

Ecosystem specific

{
    "binaries": [
        {
            "nvidia-open-driver-G06-signed-azure-devel": "535.129.03-150500.3.13.1",
            "nvidia-open-driver-G06-signed-default-devel": "535.129.03-150500.3.13.1",
            "nvidia-open-driver-G06-signed-kmp-default": "535.129.03_k5.14.21_150500.55.31-150500.3.13.1",
            "kernel-firmware-nvidia-gspx-G06": "535.129.03-150500.11.9.1",
            "nvidia-open-driver-G06-signed-kmp-azure": "535.129.03_k5.14.21_150500.33.20-150500.3.13.1",
            "nvidia-open-driver-G06-signed-kmp-64kb": "535.129.03_k5.14.21_150500.55.31-150500.3.13.1",
            "nvidia-open-driver-G06-signed-64kb-devel": "535.129.03-150500.3.13.1"
        }
    ]
}