Stories
Slash Boxes
Comments

SoylentNews is people

posted by Fnord666 on Saturday January 09 2021, @03:35AM   Printer-friendly

NVIDIA fixes high severity flaws affecting Windows, Linux devices:

NVIDIA has released security updates to address six security vulnerabilities found in Windows and Linux GPU display drivers, as well as ten additional flaws affecting the NVIDIA Virtual GPU (vGPU) management software.

The vulnerabilities expose Windows and Linux machines to attacks leading to denial of service, escalation of privileges, data tampering, or information disclosure.

All these security bugs require local user access, which means that potential attackers will first have to gain access to vulnerable devices using an additional attack vector.

[...] The full list of security flaws addressed by NVIDIA this month is available in the January 2021 Security Bulletin.


Original Submission

This discussion has been archived. No new comments can be posted.
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
(1)
  • (Score: -1, Offtopic) by Anonymous Coward on Saturday January 09 2021, @05:03AM (3 children)

    by Anonymous Coward on Saturday January 09 2021, @05:03AM (#1097316)

    Any and all submissions by Runaway1956 are now suspect of treason. Will not read. Will not comment. This is my last communication on this matter. Runaway1956 needs to be arrested, and convicted, of treason and perfidy.

    • (Score: -1, Offtopic) by Anonymous Coward on Saturday January 09 2021, @05:17AM (1 child)

      by Anonymous Coward on Saturday January 09 2021, @05:17AM (#1097318)

      I concur. We need some way to keep the Eds from accepting insurrectionist subs in order to support the insurrection. Kinda a free peaches conundrum? Shirley janrinok has a solution! Death to Runaway1956! At least five times, to, you know, compensate.

      • (Score: -1, Offtopic) by Anonymous Coward on Saturday January 09 2021, @05:52AM

        by Anonymous Coward on Saturday January 09 2021, @05:52AM (#1097324)

        A big lie! A big lie! A big lie!

        Keep repeating it and it will be true.

    • (Score: 0) by Anonymous Coward on Saturday January 09 2021, @06:45AM

      by Anonymous Coward on Saturday January 09 2021, @06:45AM (#1097336)
  • (Score: 1, Interesting) by Anonymous Coward on Saturday January 09 2021, @07:08AM (1 child)

    by Anonymous Coward on Saturday January 09 2021, @07:08AM (#1097344)

    What do users with older cards/drivers do? Let's say I use this:

    xserver-xorg-video-nvidia-legacy-340xx/unstable 340.108-10 amd64
    NVIDIA binary Xorg driver (340xx legacy version)

    What does that mean for me? Should older drivers be pulled from repos if this is such a serious concern?

    • (Score: 4, Informative) by Runaway1956 on Saturday January 09 2021, @07:55AM

      by Runaway1956 (2926) Subscriber Badge on Saturday January 09 2021, @07:55AM (#1097350) Journal

      Go here - https://www.nvidia.com/en-us/geforce/drivers/ [nvidia.com]

      Feed in your video card, operating system, etc to see which driver is recommended. When I finally landed on the 340 driver page, I found that there is no updated driver.

      Linux Display Driver - x86
      Driver Version: 340.1080 - Release Date: Mon Dec 23, 2019
      GET DOWNLOAD

      That 12 1/2 month old driver is the latest of your legacy drivers.

      Those more current drivers have incrementally higher driver versions, and they all have a release date of this week.

      Apparently, the old cards and drivers don't have the vulnerabilities of the newer cards and drivers.

      Face it, three whole generations of hardware and software separate the 340 drivers from the 460 drivers. They share little.

  • (Score: 0) by Anonymous Coward on Saturday January 09 2021, @08:35AM

    by Anonymous Coward on Saturday January 09 2021, @08:35AM (#1097356)

    Oooh juicy! Not as good as the old DMA video card fun times, but still.

    Then again, NVIDIA applications are a morass, yet.

  • (Score: 2) by digitalaudiorock on Saturday January 09 2021, @12:41PM (4 children)

    by digitalaudiorock (688) on Saturday January 09 2021, @12:41PM (#1097377) Journal

    I've used nVidia cards for some time and still have one on my MythTV frontend (a GT 430 running on an old x86 system). That's relegated to the 390 drivers since nVidia dropped 32 bit support. That was one of the many things that finally made me draw the line with their closed source bullshit.

    I just got done building a brand new AMD based system running Gentoo. When I built that I decided to go with a Radeon RX 5500 XT using the AMDGPU kernel drivers and I couldn't be happier with it....bought a new 4K monitor after. VDPAU video decoding is working without a hitch...just awesome. From what I recall hearing, the old Radeon kernel support was pretty bad, but for anyone who hasn't tried, for me at least, the AMDGPU stuff is awesome.

    • (Score: 0) by Anonymous Coward on Saturday January 09 2021, @04:06PM (3 children)

      by Anonymous Coward on Saturday January 09 2021, @04:06PM (#1097477)

      Do AMD cards support computation? How do they performed compared to CUDA? Do they work in MATLAB?

      • (Score: 0) by Anonymous Coward on Saturday January 09 2021, @07:25PM

        by Anonymous Coward on Saturday January 09 2021, @07:25PM (#1097576)

        yes, use openCL. My guess is worse than CUDA, but idk. Don't know about matlab at all. I won't use CUDA or buy nvidia, so these differences don't matter to me.

      • (Score: 0) by Anonymous Coward on Sunday January 10 2021, @11:21AM (1 child)

        by Anonymous Coward on Sunday January 10 2021, @11:21AM (#1097840)

        GPGPU stuff is not as good on AMD unfortunately. The problem is that everyone optimizes for CUDA, and barely cares about OpenCL, so things perform worse, so people buy nVidia, so developers optimize for CUDA, so...

        On top of that AMD's performance has been legitimately behind nVidia for a couple of generations. This is the first time in a while that AMD has had competitive cards in raw performance, but it doesn't matter because nobody can buy anything.

        • (Score: 2) by takyon on Sunday January 10 2021, @07:49PM

          by takyon (881) <takyonNO@SPAMsoylentnews.org> on Sunday January 10 2021, @07:49PM (#1097955) Journal

          The AMD Instinct MI100 (CDNA 1.0) should be a big improvement, but it's not a consumer graphics card. YMMV.

          https://en.wikipedia.org/wiki/List_of_AMD_graphics_processing_units#Radeon_Instinct_series [wikipedia.org]

          https://www.phoronix.com/scan.php?page=article&item=amd-mi100-rocm4&num=1 [phoronix.com]

          On the ROCm 4.0 front, this updated Radeon Open eCosystem stack is designed to make it easier than ever to port NVIDIA CUDA code-bases to it and doing so in a performant manner. ROCm 4.0 is being advertised as an open-source platform for the "Exascale Era" and supports both the OpenMP 5.0 industry standard and their HIP interfaces along with the likes of the PyTorch and Tensorflow frameworks. One of the focuses moving forward for ROCm is making it easier for developers to deploy and port their software to running on this open-source compute stack rather than the proprietary confines of NVIDIA CUDA. In regards to ROCm 4.0, will be firing it up soon on other GPUs in looking at its performance.

          https://www.phoronix.com/scan.php?page=news_item&px=Radeon-ROCm-4.0-Released [phoronix.com]

          Rather peculiar with ROCm 4.0 is the officially supported hardware... Officially GFX9 "Vega" and CDNA are the supported GPUs while Polaris and Hawaii (GFX8 and GFX7) should work but not guaranteed for full support. Notably absent still are any GFX10/RDNA "Navi" graphics processors with ROCm 4.0. But what makes it peculiar is the packaged Radeon Software for Linux driver with its recent RDNA 2 (Radeon RX 6000 series) support does include a working ROCm-based OpenCL driver. So ROCm 4.0 might end up working with Navi/RDNA, but not officially or perhaps only for OpenCL... I haven't been able to get a clear answer from AMD. I'll be trying it this weekend with both Navi generations to see if ROCm 4.0 is in fact now working on these newer consumer GPUs or if it's still a dud with this newest released.

          --
          [SIG] 10/28/2017: Soylent Upgrade v14 [soylentnews.org]
  • (Score: 1, Insightful) by Anonymous Coward on Saturday January 09 2021, @06:53PM

    by Anonymous Coward on Saturday January 09 2021, @06:53PM (#1097553)

    Even for free (freedom) software hostile NVIDIA hardware (at least the older stuff), nouveau drivers are available.

    https://nouveau.freedesktop.org/ [freedesktop.org]

    Better to avoid user hostile hardware though.

(1)