SUSE-SU-2023:4427-1

See a problem?
Please try reporting it to the source first.

Source

https://www.suse.com/support/update/announcement/2023/suse-su-20234427-1/

Import Source

https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2023:4427-1.json

JSON Data

https://api.osv.dev/v1/vulns/SUSE-SU-2023:4427-1

Related

CVE-2023-31022

Published

2023-11-13T14:33:58Z

Modified

2023-11-13T14:33:58Z

Summary

Security update for kernel-firmware-nvidia-gspx-G06, nvidia-open-driver-G06-signed

Details

This update for kernel-firmware-nvidia-gspx-G06, nvidia-open-driver-G06-signed fixes the following issues:

Security issue fixed:

CVE-2023-31022: Fixed NULL ptr deref in kernel module layer

Changes in kernel-firmware-nvidia-gspx-G06:

update firmware to version 535.129.03
update firmware to version 535.113.01

Changes in nvidia-open-driver-G06-signed:

Update to version 535.129.03
Add a devel package so other modules can be built against this one. [jira#PED-4964]
disabled build of nvidia-peermem module; it's no longer needed and never worked anyway (it was only a stub) [bsc#1211892]
preamble: added conflict to nvidia-gfxG05-kmp to prevent users from accidently installing conflicting proprietary kernelspace drivers from CUDA repository
Update to version 535.113.01
kmp-post.sh/kmp-postun.sh:
- add/remove nosimplefb=1 kernel option in order to fix Linux console also on sle15-sp6/Leap 15.6 kernel, which will come with simpledrm support

References

Affected packages

SUSE:Linux Enterprise Micro 5.5 / kernel-firmware-nvidia-gspx-G06

Package

Name: kernel-firmware-nvidia-gspx-G06
Purl: pkg:rpm/suse/kernel-firmware-nvidia-gspx-G06&distro=SUSE%20Linux%20Enterprise%20Micro%205.5

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

535.129.03-150500.11.9.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-firmware-nvidia-gspx-G06": "535.129.03-150500.11.9.1",
            "nvidia-open-driver-G06-signed-kmp-default": "535.129.03_k5.14.21_150500.55.31-150500.3.13.1"
        }
    ]
}

SUSE:Linux Enterprise Micro 5.5 / nvidia-open-driver-G06-signed

Package

Name: nvidia-open-driver-G06-signed
Purl: pkg:rpm/suse/nvidia-open-driver-G06-signed&distro=SUSE%20Linux%20Enterprise%20Micro%205.5

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

535.129.03-150500.3.13.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-firmware-nvidia-gspx-G06": "535.129.03-150500.11.9.1",
            "nvidia-open-driver-G06-signed-kmp-default": "535.129.03_k5.14.21_150500.55.31-150500.3.13.1"
        }
    ]
}

SUSE:Linux Enterprise Module for Basesystem 15 SP5 / kernel-firmware-nvidia-gspx-G06

Package

Name: kernel-firmware-nvidia-gspx-G06
Purl: pkg:rpm/suse/kernel-firmware-nvidia-gspx-G06&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP5

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

535.129.03-150500.11.9.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-firmware-nvidia-gspx-G06": "535.129.03-150500.11.9.1",
            "nvidia-open-driver-G06-signed-64kb-devel": "535.129.03-150500.3.13.1",
            "nvidia-open-driver-G06-signed-default-devel": "535.129.03-150500.3.13.1",
            "nvidia-open-driver-G06-signed-kmp-64kb": "535.129.03_k5.14.21_150500.55.31-150500.3.13.1",
            "nvidia-open-driver-G06-signed-kmp-default": "535.129.03_k5.14.21_150500.55.31-150500.3.13.1"
        }
    ]
}

SUSE:Linux Enterprise Module for Basesystem 15 SP5 / nvidia-open-driver-G06-signed

Package

Name: nvidia-open-driver-G06-signed
Purl: pkg:rpm/suse/nvidia-open-driver-G06-signed&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP5

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

535.129.03-150500.3.13.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-firmware-nvidia-gspx-G06": "535.129.03-150500.11.9.1",
            "nvidia-open-driver-G06-signed-64kb-devel": "535.129.03-150500.3.13.1",
            "nvidia-open-driver-G06-signed-default-devel": "535.129.03-150500.3.13.1",
            "nvidia-open-driver-G06-signed-kmp-64kb": "535.129.03_k5.14.21_150500.55.31-150500.3.13.1",
            "nvidia-open-driver-G06-signed-kmp-default": "535.129.03_k5.14.21_150500.55.31-150500.3.13.1"
        }
    ]
}

SUSE:Linux Enterprise Module for Public Cloud 15 SP5 / nvidia-open-driver-G06-signed

Package

Name: nvidia-open-driver-G06-signed
Purl: pkg:rpm/suse/nvidia-open-driver-G06-signed&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Public%20Cloud%2015%20SP5

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

535.129.03-150500.3.13.1

Ecosystem specific

{
    "binaries": [
        {
            "nvidia-open-driver-G06-signed-azure-devel": "535.129.03-150500.3.13.1",
            "nvidia-open-driver-G06-signed-kmp-azure": "535.129.03_k5.14.21_150500.33.20-150500.3.13.1"
        }
    ]
}

openSUSE:Leap 15.5 / kernel-firmware-nvidia-gspx-G06

Package

Name: kernel-firmware-nvidia-gspx-G06
Purl: pkg:rpm/opensuse/kernel-firmware-nvidia-gspx-G06&distro=openSUSE%20Leap%2015.5

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

535.129.03-150500.11.9.1

Ecosystem specific

{
    "binaries": [
        {
            "nvidia-open-driver-G06-signed-azure-devel": "535.129.03-150500.3.13.1",
            "nvidia-open-driver-G06-signed-default-devel": "535.129.03-150500.3.13.1",
            "nvidia-open-driver-G06-signed-kmp-default": "535.129.03_k5.14.21_150500.55.31-150500.3.13.1",
            "kernel-firmware-nvidia-gspx-G06": "535.129.03-150500.11.9.1",
            "nvidia-open-driver-G06-signed-kmp-azure": "535.129.03_k5.14.21_150500.33.20-150500.3.13.1",
            "nvidia-open-driver-G06-signed-kmp-64kb": "535.129.03_k5.14.21_150500.55.31-150500.3.13.1",
            "nvidia-open-driver-G06-signed-64kb-devel": "535.129.03-150500.3.13.1"
        }
    ]
}

openSUSE:Leap 15.5 / nvidia-open-driver-G06-signed

Package

Name: nvidia-open-driver-G06-signed
Purl: pkg:rpm/opensuse/nvidia-open-driver-G06-signed&distro=openSUSE%20Leap%2015.5

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

535.129.03-150500.3.13.1

Ecosystem specific

{
    "binaries": [
        {
            "nvidia-open-driver-G06-signed-azure-devel": "535.129.03-150500.3.13.1",
            "nvidia-open-driver-G06-signed-default-devel": "535.129.03-150500.3.13.1",
            "nvidia-open-driver-G06-signed-kmp-default": "535.129.03_k5.14.21_150500.55.31-150500.3.13.1",
            "kernel-firmware-nvidia-gspx-G06": "535.129.03-150500.11.9.1",
            "nvidia-open-driver-G06-signed-kmp-azure": "535.129.03_k5.14.21_150500.33.20-150500.3.13.1",
            "nvidia-open-driver-G06-signed-kmp-64kb": "535.129.03_k5.14.21_150500.55.31-150500.3.13.1",
            "nvidia-open-driver-G06-signed-64kb-devel": "535.129.03-150500.3.13.1"
        }
    ]
}