*** This bug is a security vulnerability *** Public security bug reported:
According to http://nvidia.custhelp.com/app/answers/detail/a_id/4611 the NVIDIA driver needs to be updated to 384.111 to fix the Spectre vulnerabilities in the NVIDIA kernel modules (along with the upcoming Kernel security patches). I think this update should be pushed ASAP to all support Ubuntu releases as a security update. It seems so far only CVE-2017-5753 (variant 1) has been addresses and a future NVIDIA update will also address CVE-2017-5715 (variant 2) Please note there is also a updated version 390.12 for the R390 branch in case that is also provided somewhere. ** Affects: nvidia Importance: Undecided Status: New ** Affects: nvidia-graphics-drivers-384 (Ubuntu) Importance: Undecided Status: New ** Tags: cve-2017-5753 nvidia security spectre ** Information type changed from Private Security to Public Security ** Also affects: nvidia Importance: Undecided Status: New ** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2017-5753 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1741807 Title: NVIDIA Spectre attack fixes To manage notifications about this bug go to: https://bugs.launchpad.net/nvidia/+bug/1741807/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
