USN-4689-2: linux Ubuntu

CVSS: UnknownPublished
Published 11-01-2021Last modified 22-04-2026

Vulnerability summary

USN-4689-2 is a vulnerability in linux Ubuntu with no CVSS score yet.

Overall risk
0/100
0100
Minimal · default modelHow is this calculated?
CVSS score
Not scored
010
No CVSS score recorded
EPSS score
Not scored
0%100%
No EPSS score yet
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 3 · Downstream 0 · Related 3

Timeline

  1. 11-01-2021
    PublishedVulnerability first disclosed.
  2. 22-04-2026
    Last modifiedVulnerability information updated.

Description

linux, linux-aws, linux-aws-5.4, linux-azure, linux-azure-4.15, linux-azure-5.4, linux-gcp, linux-gcp-5.4, linux-hwe-5.4, linux-hwe-5.8, linux-oem-5.6, linux-oracle, linux-oracle-5.4 vulnerabilities USN-4689-1 fixed vulnerabilities in the NVIDIA graphics drivers. This update provides the corresponding updates for the NVIDIA Linux DKMS kernel modules. Original advisory details: It was discovered that the NVIDIA GPU display driver for the Linux kernel contained a vulnerability that allowed user-mode clients to access legacy privileged APIs. A local attacker could use this to cause a denial of service or escalate privileges. (CVE-2021-1052) It was discovered that the NVIDIA GPU display driver for the Linux kernel did not properly validate a pointer received from userspace in some situations. A local attacker could use this to cause a denial of service. (CVE-2021-1053) Xinyuan Lyu discovered that the NVIDIA GPU display driver for the Linux kernel did not properly restrict device-level GPU isolation. A local attacker could use this to cause a denial of service or possibly expose sensitive information. (CVE-2021-1056)

CVSS metrics

Risk metrics not yet published.

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Ubuntu13 products
  • linux< 4.15.0-130.134 | < 5.4.0-60.67
  • linux-aws< 4.15.0-1092.98 | < 5.4.0-1035.37
  • linux-aws-5.4< 5.4.0-1035.37~18.04.1
  • linux-azure< 5.4.0-1036.38
  • linux-azure-4.15< 4.15.0-1104.116

1 vendor · 13 products

References

4 links