| Name | CVE-2021-1093 |
| Description | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in firmware where the driver contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary, and may lead to denial of service or system crash. |
| Source | CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more) |
| References | DLA-2888-1 |
| Debian Bugs | 991351, 991352, 991353, 991354, 991355, 991356, 991357 |
The table below lists information on source packages.
| Source Package | Release | Version | Status |
|---|---|---|---|
| nvidia-graphics-drivers (PTS) | jessie/non-free | 340.106-1 | vulnerable |
| stretch/non-free (security), stretch/non-free (lts), stretch/non-free | 390.144-1~deb9u1 | fixed | |
| buster/non-free | 418.226.00-3 | fixed | |
| bullseye/non-free | 470.256.02-2 | fixed | |
| bookworm/non-free-firmware | 535.183.01-1~deb12u1 | fixed | |
| trixie/non-free-firmware, sid/non-free-firmware | 535.216.03-1 | fixed | |
| nvidia-graphics-drivers-legacy-340xx (PTS) | stretch/non-free | 340.108-3~deb9u1 | vulnerable |
| buster/non-free | 340.108-3~deb10u1 | vulnerable | |
| sid/non-free | 340.108-23 | vulnerable | |
| nvidia-graphics-drivers-legacy-390xx (PTS) | buster/non-free (security), buster/non-free | 390.157-1~deb10u1 | fixed |
| bullseye/non-free | 390.157-1~deb11u1 | fixed | |
| sid/non-free | 390.157-10 | fixed | |
| nvidia-graphics-drivers-tesla-418 (PTS) | bullseye/non-free | 418.226.00-6~deb11u2 | fixed |
| sid/non-free | 418.226.00-16 | fixed | |
| nvidia-graphics-drivers-tesla-450 (PTS) | bullseye/non-free | 450.248.02-7~deb11u1 | fixed |
| sid/non-free | 450.248.02-8 | fixed | |
| nvidia-graphics-drivers-tesla-460 (PTS) | bullseye/non-free | 460.106.00-17~deb11u1 | fixed |
| sid/non-free | 460.106.00-18 | fixed |
The information below is based on the following data on fixed versions.
| Package | Type | Release | Fixed Version | Urgency | Origin | Debian Bugs |
|---|---|---|---|---|---|---|
| nvidia-graphics-drivers | source | jessie | (unfixed) | end-of-life | ||
| nvidia-graphics-drivers | source | stretch | 390.144-1~deb9u1 | DLA-2888-1 | ||
| nvidia-graphics-drivers | source | buster | 418.211.00-1 | |||
| nvidia-graphics-drivers | source | (unstable) | 460.91.03-1 | 991351 | ||
| nvidia-graphics-drivers-legacy-340xx | source | (unstable) | (unfixed) | 991352 | ||
| nvidia-graphics-drivers-legacy-390xx | source | buster | 390.144-1~deb10u1 | |||
| nvidia-graphics-drivers-legacy-390xx | source | (unstable) | 390.144-1 | 991353 | ||
| nvidia-graphics-drivers-tesla-418 | source | (unstable) | 418.211.00-1 | 991354 | ||
| nvidia-graphics-drivers-tesla-440 | source | (unstable) | (unfixed) | 991355 | ||
| nvidia-graphics-drivers-tesla-450 | source | (unstable) | 450.142.00-1 | 991356 | ||
| nvidia-graphics-drivers-tesla-460 | source | (unstable) | 460.91.03-1 | 991357 |
[buster] - nvidia-graphics-drivers-legacy-340xx <ignored> (Non-free not supported, no updates provided by Nvidia anymore)
[stretch] - nvidia-graphics-drivers-legacy-340xx <ignored> (Non-free not supported, no updates provided by Nvidia anymore)
https://nvidia.custhelp.com/app/answers/detail/a_id/5211