USN-4689-4: linux Ubuntu
Vulnerability summary
USN-4689-4 is a vulnerability in linux Ubuntu with no CVSS score yet.
Advisory lineage
Upstream 2 · Downstream 0Timeline
- 21-01-2021PublishedVulnerability first disclosed.
- 22-04-2026Last modifiedVulnerability information updated.
Description
linux, linux-aws, linux-azure, linux-gcp, linux-hwe-5.4, linux-hwe-5.8, linux-oracle update USN-4689-3 fixed vulnerabilities in the NVIDIA server graphics drivers. This update provides the corresponding updates for the NVIDIA Linux DKMS kernel modules. Original advisory details: It was discovered that the NVIDIA GPU display driver for the Linux kernel contained a vulnerability that allowed user-mode clients to access legacy privileged APIs. A local attacker could use this to cause a denial of service or escalate privileges. (CVE-2021-1052) It was discovered that the NVIDIA GPU display driver for the Linux kernel did not properly validate a pointer received from userspace in some situations. A local attacker could use this to cause a denial of service. (CVE-2021-1053) Xinyuan Lyu discovered that the NVIDIA GPU display driver for the Linux kernel did not properly restrict device-level GPU isolation. A local attacker could use this to cause a denial of service or possibly expose sensitive information. (CVE-2021-1056)
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Ubuntu3 products
- linux< 4.15.0-134.138 | < 5.4.0-64.72
- linux-hwe-5.4< 5.4.0-64.72~18.04.1
- linux-hwe-5.8< 5.8.0-40.45~20.04.1
1 vendor · 3 products