SUSE-SU-2024:0770-1: Security update for kernel-firmware-nvidia-gspx-G06, nvidia-open-driver-G06-signed
This update for kernel-firmware-nvidia-gspx-G06, nvidia-open-driver-G06-signed fixes the following issues: Update to 550.54.14 Added vGPU Host and vGPU Guest support. For vGPU Host, please refer to the README.vgpu packaged in the vGPU Host Package for more details. Security issues fixed: CVE-2024-0074: A user could trigger a NULL ptr dereference. CVE-2024-0075: A user could overwrite the end of a buffer, leading to crashes or code execution.
CVE-2022-42265: A unprivileged user could trigger an integer overflow which could lead to crashes or code execution.
create /run/udev/staticnode-tags/uaccess/nvidia${devid} symlinks also during modprobing the nvidia module; this changes the issue of not having access to /dev/nvidia${devid}, when gfxcard has been replaced by a different gfx card after installing the driver
provide nvidia-open-driver-G06-kmp (jsc#PED-7117)
this makes it easy to replace the package from nVidia's CUDA repository with this presigned package
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
suse/kernel-firmware-nvidia-gspx-G06to a version that resolves this vulnerability.Fixed in 550.54.14-150400.9.21.1 - Upgrade
Upgrade
suse/nvidia-open-driver-G06-signed-kmp-default-debuginfoto a version that resolves this vulnerability.Fixed in 550.54.14_k5.14.21_150400.24.108-150400.9.50.1 - Upgrade
Upgrade
suse/nvidia-open-driver-G06-signed-debugsourceto a version that resolves this vulnerability.Fixed in 550.54.14-150400.9.50.1 - Upgrade
Upgrade
suse/nvidia-open-driver-G06-signed-kmp-defaultto a version that resolves this vulnerability.Fixed in 550.54.14_k5.14.21_150400.24.108-150400.9.50.1 - Upgrade
Upgrade
suse/nvidia-open-driver-G06-signed-kmpto a version that resolves this vulnerability.Fixed in 64kb-550.54.14_k5.14.21_150400.24.108-150400.9.50.1 - Upgrade
Upgrade
suse/nvidia-open-driver-G06-signed-kmpto a version that resolves this vulnerability.Fixed in 64kb-debuginfo-550.54.14_k5.14.21_150400.24.108-150400.9.50.1 - Upgrade
Upgrade
suse/nvidia-open-driver-G06-signedto a version that resolves this vulnerability.Fixed in 64kb-devel-550.54.14-150400.9.50.1 - Upgrade
Upgrade
suse/nvidia-open-driver-G06-signed-default-develto a version that resolves this vulnerability.Fixed in 550.54.14-150400.9.50.1 - Upgrade
Upgrade
suse/nvidia-open-driver-G06-signed-azure-develto a version that resolves this vulnerability.Fixed in 550.54.14-150400.9.50.1 - Upgrade
Upgrade
suse/nvidia-open-driver-G06-signed-kmp-azureto a version that resolves this vulnerability.Fixed in 550.54.14_k5.14.21_150400.14.75-150400.9.50.1 - Upgrade
Upgrade
suse/nvidia-open-driver-G06-signed-kmp-azure-debuginfoto a version that resolves this vulnerability.Fixed in 550.54.14_k5.14.21_150400.14.75-150400.9.50.1 - Upgrade
Upgrade
nvidia-open-driver-G06-signedto a version that resolves this vulnerability.Fixed in 550.54.14 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-2024-770=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Micro-5.3-2024-770=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Micro-5.4-2024-770=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-770=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-770=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-770=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-770=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-770=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-770=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.3-2024-770=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-770=1
Event History
Child vulnerabilities
Contains the following vulnerabilities.