SUSE-SU-2024:0772-1

See a problem?
Please try reporting it to the source first.

Source

https://www.suse.com/support/update/announcement/2024/suse-su-20240772-1/

Import Source

https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2024:0772-1.json

JSON Data

https://api.osv.dev/v1/vulns/SUSE-SU-2024:0772-1

Related

Published

2024-03-05T18:04:02Z

Modified

2024-03-05T18:04:02Z

Summary

Security update for kernel-firmware-nvidia-gspx-G06, nvidia-open-driver-G06-signed

Details

This update for kernel-firmware-nvidia-gspx-G06, nvidia-open-driver-G06-signed fixes the following issues:

Update to 550.54.14:

Added vGPU Host and vGPU Guest support. For vGPU Host, please refer to the README.vgpu packaged in the vGPU Host Package for more details. Security issues fixed:
CVE-2024-0074: A user could trigger a NULL ptr dereference.
CVE-2024-0075: A user could overwrite the end of a buffer, leading to crashes or code execution.
CVE-2022-42265: A unprivileged user could trigger an integer overflow which could lead to crashes or code execution.
create /run/udev/static_node-tags/uaccess/nvidia${devid} symlinks also during modprobing the nvidia module; this changes the issue of not having access to /dev/nvidia${devid}, when gfxcard has been replaced by a different gfx card after installing the driver
provide nvidia-open-driver-G06-kmp (jsc#PED-7117)

This makes it easy to replace the package from nVidia's CUDA repository with this presigned package

References

Affected packages

SUSE:Linux Enterprise Micro 5.5 / kernel-firmware-nvidia-gspx-G06

Package

Name: kernel-firmware-nvidia-gspx-G06
Purl: pkg:rpm/suse/kernel-firmware-nvidia-gspx-G06&distro=SUSE%20Linux%20Enterprise%20Micro%205.5

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

550.54.14-150500.11.18.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-firmware-nvidia-gspx-G06": "550.54.14-150500.11.18.1",
            "nvidia-open-driver-G06-signed-kmp-default": "550.54.14_k5.14.21_150500.55.49-150500.3.36.1"
        }
    ]
}

SUSE:Linux Enterprise Micro 5.5 / nvidia-open-driver-G06-signed

Package

Name: nvidia-open-driver-G06-signed
Purl: pkg:rpm/suse/nvidia-open-driver-G06-signed&distro=SUSE%20Linux%20Enterprise%20Micro%205.5

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

550.54.14-150500.3.36.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-firmware-nvidia-gspx-G06": "550.54.14-150500.11.18.1",
            "nvidia-open-driver-G06-signed-kmp-default": "550.54.14_k5.14.21_150500.55.49-150500.3.36.1"
        }
    ]
}

SUSE:Linux Enterprise Module for Basesystem 15 SP5 / kernel-firmware-nvidia-gspx-G06

Package

Name: kernel-firmware-nvidia-gspx-G06
Purl: pkg:rpm/suse/kernel-firmware-nvidia-gspx-G06&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP5

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

550.54.14-150500.11.18.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-firmware-nvidia-gspx-G06": "550.54.14-150500.11.18.1",
            "nvidia-open-driver-G06-signed-64kb-devel": "550.54.14-150500.3.36.1",
            "nvidia-open-driver-G06-signed-default-devel": "550.54.14-150500.3.36.1",
            "nvidia-open-driver-G06-signed-kmp-64kb": "550.54.14_k5.14.21_150500.55.49-150500.3.36.1",
            "nvidia-open-driver-G06-signed-kmp-default": "550.54.14_k5.14.21_150500.55.49-150500.3.36.1"
        }
    ]
}

SUSE:Linux Enterprise Module for Basesystem 15 SP5 / nvidia-open-driver-G06-signed

Package

Name: nvidia-open-driver-G06-signed
Purl: pkg:rpm/suse/nvidia-open-driver-G06-signed&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP5

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

550.54.14-150500.3.36.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-firmware-nvidia-gspx-G06": "550.54.14-150500.11.18.1",
            "nvidia-open-driver-G06-signed-64kb-devel": "550.54.14-150500.3.36.1",
            "nvidia-open-driver-G06-signed-default-devel": "550.54.14-150500.3.36.1",
            "nvidia-open-driver-G06-signed-kmp-64kb": "550.54.14_k5.14.21_150500.55.49-150500.3.36.1",
            "nvidia-open-driver-G06-signed-kmp-default": "550.54.14_k5.14.21_150500.55.49-150500.3.36.1"
        }
    ]
}

SUSE:Linux Enterprise Module for Public Cloud 15 SP5 / nvidia-open-driver-G06-signed

Package

Name: nvidia-open-driver-G06-signed
Purl: pkg:rpm/suse/nvidia-open-driver-G06-signed&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Public%20Cloud%2015%20SP5

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

550.54.14-150500.3.36.1

Ecosystem specific

{
    "binaries": [
        {
            "nvidia-open-driver-G06-signed-azure-devel": "550.54.14-150500.3.36.1",
            "nvidia-open-driver-G06-signed-kmp-azure": "550.54.14_k5.14.21_150500.33.34-150500.3.36.1"
        }
    ]
}

openSUSE:Leap 15.5 / kernel-firmware-nvidia-gspx-G06

Package

Name: kernel-firmware-nvidia-gspx-G06
Purl: pkg:rpm/opensuse/kernel-firmware-nvidia-gspx-G06&distro=openSUSE%20Leap%2015.5

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

550.54.14-150500.11.18.1

Ecosystem specific

{
    "binaries": [
        {
            "nvidia-open-driver-G06-signed-azure-devel": "550.54.14-150500.3.36.1",
            "nvidia-open-driver-G06-signed-default-devel": "550.54.14-150500.3.36.1",
            "nvidia-open-driver-G06-signed-kmp-default": "550.54.14_k5.14.21_150500.55.49-150500.3.36.1",
            "kernel-firmware-nvidia-gspx-G06": "550.54.14-150500.11.18.1",
            "nvidia-open-driver-G06-signed-kmp-azure": "550.54.14_k5.14.21_150500.33.34-150500.3.36.1",
            "nvidia-open-driver-G06-signed-kmp-64kb": "550.54.14_k5.14.21_150500.55.49-150500.3.36.1",
            "nvidia-open-driver-G06-signed-64kb-devel": "550.54.14-150500.3.36.1"
        }
    ]
}

openSUSE:Leap 15.5 / nvidia-open-driver-G06-signed

Package

Name: nvidia-open-driver-G06-signed
Purl: pkg:rpm/opensuse/nvidia-open-driver-G06-signed&distro=openSUSE%20Leap%2015.5

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

550.54.14-150500.3.36.1

Ecosystem specific

{
    "binaries": [
        {
            "nvidia-open-driver-G06-signed-azure-devel": "550.54.14-150500.3.36.1",
            "nvidia-open-driver-G06-signed-default-devel": "550.54.14-150500.3.36.1",
            "nvidia-open-driver-G06-signed-kmp-default": "550.54.14_k5.14.21_150500.55.49-150500.3.36.1",
            "kernel-firmware-nvidia-gspx-G06": "550.54.14-150500.11.18.1",
            "nvidia-open-driver-G06-signed-kmp-azure": "550.54.14_k5.14.21_150500.33.34-150500.3.36.1",
            "nvidia-open-driver-G06-signed-kmp-64kb": "550.54.14_k5.14.21_150500.55.49-150500.3.36.1",
            "nvidia-open-driver-G06-signed-64kb-devel": "550.54.14-150500.3.36.1"
        }
    ]
}