USN-3904-1: NVIDIA graphics drivers vulnerability

nvidia-graphics-drivers-390 vulnerability

A security issue affects these releases of Ubuntu and its derivatives:

• Ubuntu 18.10
• Ubuntu 18.04 LTS

Summary

NVIDIA graphics drivers could be made to expose sensitive information.

Software Description

• nvidia-graphics-drivers-390 - NVIDIA binary X.Org driver

Details

It was discovered that the NVIDIA graphics drivers incorrectly handled the GPU performance counters. A local attacker could possibly use this issue to access the application data processed on the GPU.

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 18.10

xserver-xorg-video-nvidia-390 - 390.116-0ubuntu0.18.10.1

Ubuntu 18.04 LTS

xserver-xorg-video-nvidia-390 - 390.116-0ubuntu0.18.04.1

To update your system, please follow these instructions: https://wiki.ubuntu.com/Security/Upgrades.

After a standard system update you need to reboot your computer to make all the necessary changes.

References

• CVE‑2018‑6260

from Ubuntu Security Notices https://ift.tt/2SRrwPI