It seems like 12.04 is fixed, but it was assigned to Alberto after the fix was published. Is 12.04 still affected?
-- You received this bug notification because you are a member of Desktop Packages, which is subscribed to nvidia-graphics-drivers in Ubuntu. https://bugs.launchpad.net/bugs/959842 Title: root escalation via /dev/nvidia0 Status in “nvidia-graphics-drivers” package in Ubuntu: Fix Released Status in “nvidia-graphics-drivers-173” package in Ubuntu: Confirmed Status in “nvidia-graphics-drivers-173-updates” package in Ubuntu: Confirmed Status in “nvidia-graphics-drivers-updates” package in Ubuntu: Fix Released Status in “nvidia-graphics-drivers” source package in Lucid: Fix Released Status in “nvidia-graphics-drivers-173” source package in Lucid: Fix Released Status in “nvidia-graphics-drivers-173-updates” source package in Lucid: Fix Released Status in “nvidia-graphics-drivers-updates” source package in Lucid: Fix Released Status in “nvidia-graphics-drivers” source package in Natty: Fix Released Status in “nvidia-graphics-drivers-173” source package in Natty: Fix Released Status in “nvidia-graphics-drivers-173-updates” source package in Natty: Fix Released Status in “nvidia-graphics-drivers-updates” source package in Natty: Fix Released Status in “nvidia-graphics-drivers” source package in Oneiric: Fix Released Status in “nvidia-graphics-drivers-173” source package in Oneiric: Fix Released Status in “nvidia-graphics-drivers-173-updates” source package in Oneiric: Fix Released Status in “nvidia-graphics-drivers-updates” source package in Oneiric: Fix Released Status in “nvidia-graphics-drivers” source package in Precise: Fix Released Status in “nvidia-graphics-drivers-173” source package in Precise: Confirmed Status in “nvidia-graphics-drivers-173-updates” source package in Precise: Confirmed Status in “nvidia-graphics-drivers-updates” source package in Precise: Fix Released Bug description: It was raised to me just now that there is a security issue with /dev/nvidia0 where an unprivileged account can access kernel memory and gain root access. An example exploit is attached. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/nvidia-graphics-drivers/+bug/959842/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : desktop-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp
