Stories
Slash Boxes
Comments

SoylentNews is people

posted by hubie on Tuesday May 17 2022, @11:57PM   Printer-friendly
from the you-support-me-now dept.

https://www.ghacks.net/2022/05/17/nvidia-releases-security-update-for-out-of-support-gpus/

Nvidia published a security bulletin on May 16, 2022 in which it informs customers about a new software security update for the Nvidia GPU display driver. The update patches security issues in earlier driver versions that can lead to "denial of service, information disclosure, or data tampering".

[...] In this particular case, Nvidia released security updates for Kepler-series graphics adapters that it no longer supports officially with Game Ready Drivers.

The company retired most products belonging to the GTX 600 and GTX 700 Kepler series in 2021. The first Kepler-based video cards were released in 2012 by Nvidia.

"Windows and Linux versions of the drivers are affected according to the security bulletin."

[...] The security bulletin lists a total of ten vulnerabilities in Nvidia GPU display drivers. Most are vulnerabilities in the kernel mode layer on Windows and Linux devices, while some address security issues in the DirectX11 user mode driver on Windows, or a vulnerability in the ECC layer.

Open source drivers and now legacy support? What's going on here?


Original Submission

Related Stories

NVIDIA Transitioning To Official, Open-Source Linux GPU Kernel Driver 37 comments

NVIDIA Transitioning To Official, Open-Source Linux GPU Kernel Driver

The day has finally come: NVIDIA is publishing their Linux GPU kernel modules as open-source! To much excitement and a sign of the times, the embargo has just expired on this super-exciting milestone that many of us have been hoping to see for many years. Over the past two decades NVIDIA has offered great Linux driver support with their proprietary driver stack, but with the success of AMD's open-source driver effort going on for more than a decade, many have been calling for NVIDIA to open up their drivers. Their user-space software is remaining closed-source but as of today they have formally opened up their Linux GPU kernel modules and will be maintaining it moving forward. Here's the scoop on this landmark open-source decision at NVIDIA.

Many have been wondering in recent years what sort of NVIDIA open-source play the company has been working on... Going back to the end of 2019 have been signals of some sort of open-source driver effort and various rumblings have continued since that point. Last month I also pointed out a new open-source kernel driver appearing as part of the NVIDIA Tegra sources. Well, now the embargo has just expired and the lid can be lifted - NVIDIA is providing a fully open-source kernel driver solution for their graphics offerings. This isn't limited to just Tegra or so but spans not only their desktop graphics but is already production-ready for data center GPU usage.


Original Submission

This discussion has been archived. No new comments can be posted.
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
(1)
  • (Score: 1, Funny) by Anonymous Coward on Wednesday May 18 2022, @12:17AM

    by Anonymous Coward on Wednesday May 18 2022, @12:17AM (#1245827)

    Jokes on you, nvidia - i still use your geforce 7.

    Uhm... geforce 7 TURBO - i'm no peasant.

  • (Score: 2, Offtopic) by jasassin on Wednesday May 18 2022, @01:04AM (1 child)

    by jasassin (3566) <jasassin@gmail.com> on Wednesday May 18 2022, @01:04AM (#1245835) Homepage Journal

    Well done nVidia! Pretty cool (especially in this bizarre GPU supply/mining/inflation situation).

    It’s also cool they’re diddling their driver source so it can be open now. I’m not sure if it’s 100% open source… anyone here in the know about that?

    --
    jasassin@gmail.com GPG Key ID: 0xE6462C68A9A3DB5A
    • (Score: 4, Interesting) by RamiK on Wednesday May 18 2022, @09:40AM

      by RamiK (1813) on Wednesday May 18 2022, @09:40AM (#1245886)

      I’m not sure if it’s 100% open source… anyone here in the know about that?

      There's still a big firmware blob (slightly worse than AMD) and there's still a lot of user-mode libraries, headers and shims (libglx... cuda... basically most of the stuff that they put into /usr/lib/xorg/ and /usr/lib/: https://download.nvidia.com/XFree86/Linux-x86_64/440.36/README/installedcomponents.html [nvidia.com]) that are closed source.

      --
      compiling...
  • (Score: 4, Interesting) by looorg on Wednesday May 18 2022, @01:46AM (1 child)

    by looorg (578) on Wednesday May 18 2022, @01:46AM (#1245844)

    Open source drivers and now legacy support? What's going on here?

    They probably need the goodwill and positive press after all the bitcoin/cryptofarm stuff that totally screwed their previous and normal user base.

    • (Score: 0) by Anonymous Coward on Thursday May 19 2022, @06:15PM

      by Anonymous Coward on Thursday May 19 2022, @06:15PM (#1246333)
      Why would they need it for that? Their previous user base will still buy the stuff if it becomes cheap enough. It's not like AMD's stuff was cheaper either.

      If the stuff doesn't become cheap that's because the crypto miners are still buying it all up, in which case they still make lots of money.
  • (Score: 4, Interesting) by MIRV888 on Wednesday May 18 2022, @05:55AM (2 children)

    by MIRV888 (11376) on Wednesday May 18 2022, @05:55AM (#1245868)

    I was wondering why my GTX770 had an update out of the blue. It's been my media box for years so it doesn't go out to the internet much. They must be pretty bad vulnerabilities for Nvidia to patch them after support has ended.

    • (Score: 0) by Anonymous Coward on Wednesday May 18 2022, @06:10PM

      by Anonymous Coward on Wednesday May 18 2022, @06:10PM (#1246002)

      they can mine crypto faster then the new ones :P
      go here to buy my 660ti. slighly used borderland2 play-thru: https://... [...]

    • (Score: 2) by Joe Desertrat on Saturday May 21 2022, @01:22AM

      by Joe Desertrat (2454) on Saturday May 21 2022, @01:22AM (#1246744)

      Either that or they sat on these updates for years, hoping to force users to upgrade to newer versions. Now that the years and numbers make that a pretty much moot point, why not release them and gain good press for doing something that helps a small few and doesn't hurt their bottom line.

(1)