Ubuntu Security Notice 3904-1 - It was discovered that the NVIDIA graphics drivers incorrectly handled the GPU performance counters. A local attacker could possibly use this issue to access the application data processed on the GPU.
0a314e97dd0cdefd205a751678974b7d37fc096c5572956f57a5853e0f716107
==========================================================================
Ubuntu Security Notice USN-3904-1
March 07, 2019
nvidia-graphics-drivers-390 vulnerability
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 18.10
- Ubuntu 18.04 LTS
Summary:
NVIDIA graphics drivers could be made to expose sensitive information.
Software Description:
- nvidia-graphics-drivers-390: NVIDIA binary X.Org driver
Details:
It was discovered that the NVIDIA graphics drivers incorrectly handled the
GPU performance counters. A local attacker could possibly use this issue to
access the application data processed on the GPU.
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 18.10:
xserver-xorg-video-nvidia-390 390.116-0ubuntu0.18.10.1
Ubuntu 18.04 LTS:
xserver-xorg-video-nvidia-390 390.116-0ubuntu0.18.04.1
After a standard system update you need to reboot your computer to make
all the necessary changes.
References:
https://usn.ubuntu.com/usn/usn-3904-1
CVEa2018a6260
Package Information:
https://launchpad.net/ubuntu/+source/nvidia-graphics-drivers-390/390.116-0ubuntu0.18.10.1
https://launchpad.net/ubuntu/+source/nvidia-graphics-drivers-390/390.116-0ubuntu0.18.04.1