SUSE-SU-2024:2585-1

See a problem?
Please try reporting it to the source first.

Source

https://www.suse.com/support/update/announcement/2024/suse-su-20242585-1/

Import Source

https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2024:2585-1.json

JSON Data

https://api.osv.dev/v1/vulns/SUSE-SU-2024:2585-1

Related

Published

2024-07-22T11:44:18Z

Modified

2024-07-22T11:44:18Z

Summary

Security update for kernel-firmware-nvidia-gspx-G06

Details

This update for kernel-firmware-nvidia-gspx-G06 fixes the following issues:

Update to version 555.42.06 for CUDA.

Security Update 550.90.07:

CVE-2024-0090: Fixed out of bounds write (bsc#1223356).
CVE-2024-0092: Fixed incorrect exception handling (bsc#1223356).
CVE-2024-0091: Fixed untrusted pointer dereference (bsc#1223356).

Changes in kernel-firmware-nvidia-gspx-G06:

Update to 550.100 (bsc#1227575)
Add a second flavor to be used by the kernel module versions used by CUDA. The firmware targetting CUDA contains '-cuda' in its name to track its versions separately from the graphics firmware. (bsc#1227417)

Changes in nvidia-open-driver-G06-signed:

Update to 550.100 (bsc#1227575)
- Fixed a bug that caused OpenGL triple buffering to behave like double buffering.
To avoid issues with missing dependencies when no CUDA repo is present make the dependecy to nvidia-compute-G06 conditional.
CUDA is not available for Tumbleweed, exclude the build of the cuda flavor.
preamble: let the -cuda flavor KMP require the -cuda flavor firmware
Add a second flavor for building the kernel module versions used by CUDA. The kmp targetting CUDA contains '-cuda' in its name to track its versions separately from the graphics kmp. (bsc#1227417)
Provide the meta package nv-prefer-signed-open-driver to make sure the latest available SUSE-build open driver is installed - independent of the latest available open driver version in he CUDA repository. Rationale: The package cuda-runtime provides the link between CUDA and the kernel driver version through a Requires: cuda-drivers >= %version This implies that a CUDA version will run withany kernel driver version equal or higher than a base version. nvidia-compute-G06 provides the glue layer between CUDA and a specific version of he kernel driver both by providing a set of base libraries and by requiring a specific kernel version. 'cuda-drivers' (provided by nvidia-compute-utils-G06) requires an unversioned nvidia-compute-G06. With this, the resolver will install the latest available and applicable nvidia-compute-G06. nv-prefer-signed-open-driver then represents the latest available open driver version and restricts the nvidia-compute-G06 version to it. (bsc#1227419)

References

Affected packages

SUSE:Linux Enterprise Module for Basesystem 15 SP6 / kernel-firmware-nvidia-gspx-G06

Package

Name: kernel-firmware-nvidia-gspx-G06
Purl: pkg:rpm/suse/kernel-firmware-nvidia-gspx-G06&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP6

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

550.100-150600.3.7.1

Ecosystem specific

{
    "binaries": [
        {
            "nvidia-open-driver-G06-signed-64kb-devel": "550.100-150600.3.7.1",
            "kernel-firmware-nvidia-gspx-G06-cuda": "555.42.06-150600.3.7.1",
            "nvidia-open-driver-G06-signed-cuda-64kb-devel": "555.42.06-150600.3.7.1",
            "nvidia-open-driver-G06-signed-cuda-kmp-default": "555.42.06_k6.4.0_150600.23.7-150600.3.7.1",
            "nvidia-open-driver-G06-signed-cuda-kmp-64kb": "555.42.06_k6.4.0_150600.23.7-150600.3.7.1",
            "nvidia-open-driver-G06-signed-default-devel": "550.100-150600.3.7.1",
            "kernel-firmware-nvidia-gspx-G06": "550.100-150600.3.7.1",
            "nvidia-open-driver-G06-signed-kmp-default": "550.100_k6.4.0_150600.23.7-150600.3.7.1",
            "nv-prefer-signed-open-driver": "555.42.06-150600.3.7.1",
            "nvidia-open-driver-G06-signed-kmp-64kb": "550.100_k6.4.0_150600.23.7-150600.3.7.1",
            "nvidia-open-driver-G06-signed-cuda-default-devel": "555.42.06-150600.3.7.1"
        }
    ]
}

SUSE:Linux Enterprise Module for Basesystem 15 SP6 / kernel-firmware-nvidia-gspx-G06-cuda

Package

Name: kernel-firmware-nvidia-gspx-G06-cuda
Purl: pkg:rpm/suse/kernel-firmware-nvidia-gspx-G06-cuda&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP6

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

555.42.06-150600.3.7.1

Ecosystem specific

{
    "binaries": [
        {
            "nvidia-open-driver-G06-signed-64kb-devel": "550.100-150600.3.7.1",
            "kernel-firmware-nvidia-gspx-G06-cuda": "555.42.06-150600.3.7.1",
            "nvidia-open-driver-G06-signed-cuda-64kb-devel": "555.42.06-150600.3.7.1",
            "nvidia-open-driver-G06-signed-cuda-kmp-default": "555.42.06_k6.4.0_150600.23.7-150600.3.7.1",
            "nvidia-open-driver-G06-signed-cuda-kmp-64kb": "555.42.06_k6.4.0_150600.23.7-150600.3.7.1",
            "nvidia-open-driver-G06-signed-default-devel": "550.100-150600.3.7.1",
            "kernel-firmware-nvidia-gspx-G06": "550.100-150600.3.7.1",
            "nvidia-open-driver-G06-signed-kmp-default": "550.100_k6.4.0_150600.23.7-150600.3.7.1",
            "nv-prefer-signed-open-driver": "555.42.06-150600.3.7.1",
            "nvidia-open-driver-G06-signed-kmp-64kb": "550.100_k6.4.0_150600.23.7-150600.3.7.1",
            "nvidia-open-driver-G06-signed-cuda-default-devel": "555.42.06-150600.3.7.1"
        }
    ]
}

SUSE:Linux Enterprise Module for Basesystem 15 SP6 / nvidia-open-driver-G06-signed

Package

Name: nvidia-open-driver-G06-signed
Purl: pkg:rpm/suse/nvidia-open-driver-G06-signed&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP6

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

550.100-150600.3.7.1

Ecosystem specific

{
    "binaries": [
        {
            "nvidia-open-driver-G06-signed-64kb-devel": "550.100-150600.3.7.1",
            "kernel-firmware-nvidia-gspx-G06-cuda": "555.42.06-150600.3.7.1",
            "nvidia-open-driver-G06-signed-cuda-64kb-devel": "555.42.06-150600.3.7.1",
            "nvidia-open-driver-G06-signed-cuda-kmp-default": "555.42.06_k6.4.0_150600.23.7-150600.3.7.1",
            "nvidia-open-driver-G06-signed-cuda-kmp-64kb": "555.42.06_k6.4.0_150600.23.7-150600.3.7.1",
            "nvidia-open-driver-G06-signed-default-devel": "550.100-150600.3.7.1",
            "kernel-firmware-nvidia-gspx-G06": "550.100-150600.3.7.1",
            "nvidia-open-driver-G06-signed-kmp-default": "550.100_k6.4.0_150600.23.7-150600.3.7.1",
            "nv-prefer-signed-open-driver": "555.42.06-150600.3.7.1",
            "nvidia-open-driver-G06-signed-kmp-64kb": "550.100_k6.4.0_150600.23.7-150600.3.7.1",
            "nvidia-open-driver-G06-signed-cuda-default-devel": "555.42.06-150600.3.7.1"
        }
    ]
}

SUSE:Linux Enterprise Module for Basesystem 15 SP6 / nvidia-open-driver-G06-signed-cuda

Package

Name: nvidia-open-driver-G06-signed-cuda
Purl: pkg:rpm/suse/nvidia-open-driver-G06-signed-cuda&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP6

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

555.42.06-150600.3.7.1

Ecosystem specific

{
    "binaries": [
        {
            "nvidia-open-driver-G06-signed-64kb-devel": "550.100-150600.3.7.1",
            "kernel-firmware-nvidia-gspx-G06-cuda": "555.42.06-150600.3.7.1",
            "nvidia-open-driver-G06-signed-cuda-64kb-devel": "555.42.06-150600.3.7.1",
            "nvidia-open-driver-G06-signed-cuda-kmp-default": "555.42.06_k6.4.0_150600.23.7-150600.3.7.1",
            "nvidia-open-driver-G06-signed-cuda-kmp-64kb": "555.42.06_k6.4.0_150600.23.7-150600.3.7.1",
            "nvidia-open-driver-G06-signed-default-devel": "550.100-150600.3.7.1",
            "kernel-firmware-nvidia-gspx-G06": "550.100-150600.3.7.1",
            "nvidia-open-driver-G06-signed-kmp-default": "550.100_k6.4.0_150600.23.7-150600.3.7.1",
            "nv-prefer-signed-open-driver": "555.42.06-150600.3.7.1",
            "nvidia-open-driver-G06-signed-kmp-64kb": "550.100_k6.4.0_150600.23.7-150600.3.7.1",
            "nvidia-open-driver-G06-signed-cuda-default-devel": "555.42.06-150600.3.7.1"
        }
    ]
}

SUSE:Linux Enterprise Module for Public Cloud 15 SP6 / nvidia-open-driver-G06-signed

Package

Name: nvidia-open-driver-G06-signed
Purl: pkg:rpm/suse/nvidia-open-driver-G06-signed&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Public%20Cloud%2015%20SP6

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

550.100-150600.3.7.1

Ecosystem specific

{
    "binaries": [
        {
            "nvidia-open-driver-G06-signed-azure-devel": "550.100-150600.3.7.1",
            "nvidia-open-driver-G06-signed-kmp-azure": "550.100_k6.4.0_150600.8.5-150600.3.7.1",
            "nvidia-open-driver-G06-signed-cuda-azure-devel": "555.42.06-150600.3.7.1",
            "nvidia-open-driver-G06-signed-cuda-kmp-azure": "555.42.06_k6.4.0_150600.8.5-150600.3.7.1"
        }
    ]
}

SUSE:Linux Enterprise Module for Public Cloud 15 SP6 / nvidia-open-driver-G06-signed-cuda

Package

Name: nvidia-open-driver-G06-signed-cuda
Purl: pkg:rpm/suse/nvidia-open-driver-G06-signed-cuda&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Public%20Cloud%2015%20SP6

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

555.42.06-150600.3.7.1

Ecosystem specific

{
    "binaries": [
        {
            "nvidia-open-driver-G06-signed-azure-devel": "550.100-150600.3.7.1",
            "nvidia-open-driver-G06-signed-kmp-azure": "550.100_k6.4.0_150600.8.5-150600.3.7.1",
            "nvidia-open-driver-G06-signed-cuda-azure-devel": "555.42.06-150600.3.7.1",
            "nvidia-open-driver-G06-signed-cuda-kmp-azure": "555.42.06_k6.4.0_150600.8.5-150600.3.7.1"
        }
    ]
}

openSUSE:Leap 15.6 / kernel-firmware-nvidia-gspx-G06

Package

Name: kernel-firmware-nvidia-gspx-G06
Purl: pkg:rpm/opensuse/kernel-firmware-nvidia-gspx-G06&distro=openSUSE%20Leap%2015.6

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

550.100-150600.3.7.1

Ecosystem specific

{
    "binaries": [
        {
            "nvidia-open-driver-G06-signed-cuda-kmp-64kb": "555.42.06_k6.4.0_150600.23.7-150600.3.7.1",
            "nvidia-open-driver-G06-signed-azure-devel": "550.100-150600.3.7.1",
            "nvidia-open-driver-G06-signed-default-devel": "550.100-150600.3.7.1",
            "nvidia-open-driver-G06-signed-cuda-kmp-azure": "555.42.06_k6.4.0_150600.8.5-150600.3.7.1",
            "nvidia-open-driver-G06-signed-kmp-azure": "550.100_k6.4.0_150600.8.5-150600.3.7.1",
            "nvidia-open-driver-G06-signed-kmp-64kb": "550.100_k6.4.0_150600.23.7-150600.3.7.1",
            "nvidia-open-driver-G06-signed-cuda-default-devel": "555.42.06-150600.3.7.1",
            "kernel-firmware-nvidia-gspx-G06-cuda": "555.42.06-150600.3.7.1",
            "nvidia-open-driver-G06-signed-cuda-64kb-devel": "555.42.06-150600.3.7.1",
            "nvidia-open-driver-G06-signed-cuda-kmp-default": "555.42.06_k6.4.0_150600.23.7-150600.3.7.1",
            "kernel-firmware-nvidia-gspx-G06": "550.100-150600.3.7.1",
            "nvidia-open-driver-G06-signed-kmp-default": "550.100_k6.4.0_150600.23.7-150600.3.7.1",
            "nv-prefer-signed-open-driver": "555.42.06-150600.3.7.1",
            "nvidia-open-driver-G06-signed-cuda-azure-devel": "555.42.06-150600.3.7.1",
            "nvidia-open-driver-G06-signed-64kb-devel": "550.100-150600.3.7.1"
        }
    ]
}

openSUSE:Leap 15.6 / kernel-firmware-nvidia-gspx-G06-cuda

Package

Name: kernel-firmware-nvidia-gspx-G06-cuda
Purl: pkg:rpm/opensuse/kernel-firmware-nvidia-gspx-G06-cuda&distro=openSUSE%20Leap%2015.6

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

555.42.06-150600.3.7.1

Ecosystem specific

{
    "binaries": [
        {
            "nvidia-open-driver-G06-signed-cuda-kmp-64kb": "555.42.06_k6.4.0_150600.23.7-150600.3.7.1",
            "nvidia-open-driver-G06-signed-azure-devel": "550.100-150600.3.7.1",
            "nvidia-open-driver-G06-signed-default-devel": "550.100-150600.3.7.1",
            "nvidia-open-driver-G06-signed-cuda-kmp-azure": "555.42.06_k6.4.0_150600.8.5-150600.3.7.1",
            "nvidia-open-driver-G06-signed-kmp-azure": "550.100_k6.4.0_150600.8.5-150600.3.7.1",
            "nvidia-open-driver-G06-signed-kmp-64kb": "550.100_k6.4.0_150600.23.7-150600.3.7.1",
            "nvidia-open-driver-G06-signed-cuda-default-devel": "555.42.06-150600.3.7.1",
            "kernel-firmware-nvidia-gspx-G06-cuda": "555.42.06-150600.3.7.1",
            "nvidia-open-driver-G06-signed-cuda-64kb-devel": "555.42.06-150600.3.7.1",
            "nvidia-open-driver-G06-signed-cuda-kmp-default": "555.42.06_k6.4.0_150600.23.7-150600.3.7.1",
            "kernel-firmware-nvidia-gspx-G06": "550.100-150600.3.7.1",
            "nvidia-open-driver-G06-signed-kmp-default": "550.100_k6.4.0_150600.23.7-150600.3.7.1",
            "nv-prefer-signed-open-driver": "555.42.06-150600.3.7.1",
            "nvidia-open-driver-G06-signed-cuda-azure-devel": "555.42.06-150600.3.7.1",
            "nvidia-open-driver-G06-signed-64kb-devel": "550.100-150600.3.7.1"
        }
    ]
}

openSUSE:Leap 15.6 / nvidia-open-driver-G06-signed

Package

Name: nvidia-open-driver-G06-signed
Purl: pkg:rpm/opensuse/nvidia-open-driver-G06-signed&distro=openSUSE%20Leap%2015.6

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

550.100-150600.3.7.1

Ecosystem specific

{
    "binaries": [
        {
            "nvidia-open-driver-G06-signed-cuda-kmp-64kb": "555.42.06_k6.4.0_150600.23.7-150600.3.7.1",
            "nvidia-open-driver-G06-signed-azure-devel": "550.100-150600.3.7.1",
            "nvidia-open-driver-G06-signed-default-devel": "550.100-150600.3.7.1",
            "nvidia-open-driver-G06-signed-cuda-kmp-azure": "555.42.06_k6.4.0_150600.8.5-150600.3.7.1",
            "nvidia-open-driver-G06-signed-kmp-azure": "550.100_k6.4.0_150600.8.5-150600.3.7.1",
            "nvidia-open-driver-G06-signed-kmp-64kb": "550.100_k6.4.0_150600.23.7-150600.3.7.1",
            "nvidia-open-driver-G06-signed-cuda-default-devel": "555.42.06-150600.3.7.1",
            "kernel-firmware-nvidia-gspx-G06-cuda": "555.42.06-150600.3.7.1",
            "nvidia-open-driver-G06-signed-cuda-64kb-devel": "555.42.06-150600.3.7.1",
            "nvidia-open-driver-G06-signed-cuda-kmp-default": "555.42.06_k6.4.0_150600.23.7-150600.3.7.1",
            "kernel-firmware-nvidia-gspx-G06": "550.100-150600.3.7.1",
            "nvidia-open-driver-G06-signed-kmp-default": "550.100_k6.4.0_150600.23.7-150600.3.7.1",
            "nv-prefer-signed-open-driver": "555.42.06-150600.3.7.1",
            "nvidia-open-driver-G06-signed-cuda-azure-devel": "555.42.06-150600.3.7.1",
            "nvidia-open-driver-G06-signed-64kb-devel": "550.100-150600.3.7.1"
        }
    ]
}

openSUSE:Leap 15.6 / nvidia-open-driver-G06-signed-cuda

Package

Name: nvidia-open-driver-G06-signed-cuda
Purl: pkg:rpm/opensuse/nvidia-open-driver-G06-signed-cuda&distro=openSUSE%20Leap%2015.6

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

555.42.06-150600.3.7.1

Ecosystem specific

{
    "binaries": [
        {
            "nvidia-open-driver-G06-signed-cuda-kmp-64kb": "555.42.06_k6.4.0_150600.23.7-150600.3.7.1",
            "nvidia-open-driver-G06-signed-azure-devel": "550.100-150600.3.7.1",
            "nvidia-open-driver-G06-signed-default-devel": "550.100-150600.3.7.1",
            "nvidia-open-driver-G06-signed-cuda-kmp-azure": "555.42.06_k6.4.0_150600.8.5-150600.3.7.1",
            "nvidia-open-driver-G06-signed-kmp-azure": "550.100_k6.4.0_150600.8.5-150600.3.7.1",
            "nvidia-open-driver-G06-signed-kmp-64kb": "550.100_k6.4.0_150600.23.7-150600.3.7.1",
            "nvidia-open-driver-G06-signed-cuda-default-devel": "555.42.06-150600.3.7.1",
            "kernel-firmware-nvidia-gspx-G06-cuda": "555.42.06-150600.3.7.1",
            "nvidia-open-driver-G06-signed-cuda-64kb-devel": "555.42.06-150600.3.7.1",
            "nvidia-open-driver-G06-signed-cuda-kmp-default": "555.42.06_k6.4.0_150600.23.7-150600.3.7.1",
            "kernel-firmware-nvidia-gspx-G06": "550.100-150600.3.7.1",
            "nvidia-open-driver-G06-signed-kmp-default": "550.100_k6.4.0_150600.23.7-150600.3.7.1",
            "nv-prefer-signed-open-driver": "555.42.06-150600.3.7.1",
            "nvidia-open-driver-G06-signed-cuda-azure-devel": "555.42.06-150600.3.7.1",
            "nvidia-open-driver-G06-signed-64kb-devel": "550.100-150600.3.7.1"
        }
    ]
}