Re: CVE Request: NVidia Linux driver

[Petr Matousek <pmatouse () redhat com>]

Hi Marc,

On Wed, Aug 01, 2012 at 08:58:16AM -0400, Marc Deslauriers wrote:
> Hello,
>
> Could a CVE please be assigned to the following issue:
>
> The binary NVidia Linux driver allows local users to access arbitrary
> memory locations by leveraging GPU device-node read/write privileges,
> and escalate privileges to root. Possibly an incomplete fix for
> CVE-2012-0946.
>
> See:
>
> http://seclists.org/fulldisclosure/2012/Aug/4

did you test that the exploit works on NVIDIA driver that should contain
the CVE-2012-0946 fix?

Thanks,
-- 
Petr Matousek / Red Hat Security Response Team