Support us on Patreon to keep GamingOnLinux alive. This ensures all of our main content remains free for everyone with no article paywalls. Just good, fresh content! Alternatively, you can donate through PayPal, Liberapay or Buy us a Coffee. You can also buy games using our partner links for GOG and Humble Store.

Update your NVIDIA drivers due to multiple security issues found

By - | Views: 23,244

Here's something we missed with the latest NVIDIA driver updates - turns out that NVIDIA had multiple security issues that they put out in a recent security bulletin. Multiple issues affect both Windows and Linux, across multiple versions of the official NVIDIA proprietary driver.

The ones that affect the Linux desktop are:

  • CVE‑2021‑1052: "NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape or IOCTL in which user-mode clients can access legacy privileged APIs, which may lead to denial of service, escalation of privileges, and information disclosure."
  • CVE‑2021‑1053: "NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape or IOCTL in which improper validation of a user pointer may lead to denial of service."
  • CVE‑2021‑1056: "NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko) in which it does not completely honor operating system file system permissions to provide GPU device-level isolation, which may lead to denial of service or information disclosure."

There's also some vGPU security issues too, which also affect Linux but they're not regular desktop stuff.

If you want to make sure you're totally safe you should update to the latest driver in the series you're using. Going by the information on the NVIDIA security page you should be good on (or better) 460.32.03 which is the latest "Production Branch" driver, 450.102.04 and 390.141 being the latest Legacy driver.

You can look out for future security info here from NVIDIA.

Article taken from GamingOnLinux.com.
22 Likes, Who?
We do often include affiliate links to earn us some pennies. We are currently affiliated with GOG and Humble Store. See more here.
About the author -
author picture
I am the owner of GamingOnLinux. After discovering Linux back in the days of Mandrake in 2003, I constantly came back to check on the progress of Linux until Ubuntu appeared on the scene and it helped me to really love it. You can reach me easily by emailing GamingOnLinux directly.
See more from me
24 comments
Page: «2/3»
  Go to:

Quoting: ShaddycatDoesn't work on my machine. I get stuck at a super low resolution and 76 Hz. Using a GTX 1080 on Mint. Anyone else have a similar issue?

I'll just stick to 450 for now I think.
Did you manually upgrade from the nvidia page or did you use the driver tool provided by Linux Mint in combination with the ppa?


Last edited by Schattenspiegel on 10 January 2021 at 7:21 pm UTC
slaapliedje 10 Jan
View PC info
  • Supporter Plus
Quoting: Basiani
Quoting: XpanderOhh thats weird... i played through all of the game with 450.xx drivers..different ones. havent tried on 460 though

Yes, 450 works well for Detroit. 460 crashes when starting chapter 29 "Last Chance, Connor". I played that game whole two days and every attemp to play chapter 29 it was crashing. A little search I found that same problem have Windows users and fix was just downgrade Nvidia's driver. Tried downgrade driver on Arch Linux, but there was multiple dependencies and it failed, so temporery I installed Ubuntu with Nvidia-450 and finished game with mostly good ending. Yeah, today going back again to Arch.
I really should play through that game, I bought it when it came out on the PS4 though as I thought it was going to be an exclusive one for some reason.
TheRiddick 10 Jan
The AMD 6000 series of GPU's work on kernel 5.10 just fine but allot of nice features for them won't appear until kernel 5.12... THAT is the one downside to open-source, it can take a little while for all the features to be exposed.

I gotta give it to NVIDIA for keeping their driver updated all by themselves, but obviously they have a method of porting code from their windows drivers to Linux which appears to mostly work with a few work around caveats.

I've found updating GPU drivers and MESA to be much easier under Arch based Linux, AUR is a godsend also! The whole PPA Ubuntu random packages method was rather clunky to deal with!


Last edited by TheRiddick on 10 January 2021 at 9:44 pm UTC
Shaddycat 10 Jan
Quoting: Schattenspiegel
Quoting: ShaddycatDoesn't work on my machine. I get stuck at a super low resolution and 76 Hz. Using a GTX 1080 on Mint. Anyone else have a similar issue?

I'll just stick to 450 for now I think.
Did you manually upgrade from the nvidia page or did you use the driver tool provided by Linux Mint in combination with the ppa?

I updated with the driver tool provided by Mint.
tuubi 10 Jan
Quoting: TheRiddickI've found updating GPU drivers and MESA to be much easier under Arch based Linux, AUR is a godsend also! The whole PPA Ubuntu random packages method was rather clunky to deal with!
A Mesa update is just as simple to install as any other update, isn't it?

Are the packages in AUR less "random" than ones in a PPA?
Quoting: ShaddycatI updated with the driver tool provided by Mint.
Sorry, no clue then.
slaapliedje 11 Jan
View PC info
  • Supporter Plus
Quoting: tuubi
Quoting: TheRiddickI've found updating GPU drivers and MESA to be much easier under Arch based Linux, AUR is a godsend also! The whole PPA Ubuntu random packages method was rather clunky to deal with!
A Mesa update is just as simple to install as any other update, isn't it?

Are the packages in AUR less "random" than ones in a PPA?
Well mesa being a library that a lot of things depend upon, and PPAs basically being a wild west and not officially supported by Ubuntu...
And with Arch they are core libraries and so things that need to be rebuilt on those are rebuilt at the same time the libraries are. It is one of the 'pros' of running a Rolling release. If you are someone who always needs bleeding edge drivers / libraries, Arch is fantastic at keeping things up to date. If I ran AMD stuff, I would probably just stick to Arch.
Snaps were created to try and stop the many PPAs from being needed.
tuubi 11 Jan
Quoting: slaapliedje
Quoting: tuubi
Quoting: TheRiddickI've found updating GPU drivers and MESA to be much easier under Arch based Linux, AUR is a godsend also! The whole PPA Ubuntu random packages method was rather clunky to deal with!
A Mesa update is just as simple to install as any other update, isn't it?

Are the packages in AUR less "random" than ones in a PPA?
Well mesa being a library that a lot of things depend upon, and PPAs basically being a wild west and not officially supported by Ubuntu...
A wild west just like AUR then. I use a grand total of three PPAs on my gaming/entertainment box currently BTW, one owned and updated by a Valve employee, and the other two by the teams who develop the software I download from those PPAs. Do you always check who wrote the pkgbuilds you download from AUR?

QuoteAnd with Arch they are core libraries and so things that need to be rebuilt on those are rebuilt at the same time the libraries are. It is one of the 'pros' of running a Rolling release.
Having to build a bunch of stuff yourself is a pro?

I was a Gentoo user for a couple of years so I see what you're trying to say, but for most users that really isn't a pro.

QuoteIf you are someone who always needs bleeding edge drivers / libraries, Arch is fantastic at keeping things up to date. If I ran AMD stuff, I would probably just stick to Arch.
I don't see why I would, and I actually run AMD stuff. If you mainly use your computer for gaming, you're best off running something close to what game developers test against, with just your graphics drivers updated to the latest and greatest.

There are good reasons to prefer a rolling distro but gaming isn't one. If you just want to play your games, you don't really care about most libraries being bleeding edge as much as you care about having a supported system. That's why we have steam runtimes and whatnot.

QuoteSnaps were created to try and stop the many PPAs from being needed.
I doubt that was even in the top five reasons.



I guess this discussion is a bit off topic here.
The_Aquabat 11 Jan
QuoteWell mesa being a library that a lot of things depend upon, and PPAs basically being a wild west and not officially supported by Ubuntu...
as an Ubuntu user I would say that it ultimately doesn't matter what Ubuntu says it's supported, what it matters is what the devs says it's supported, and when you are squashing bugs on Mesa your most likely trying out git packages or building Mesa yourself. Also I doubt there is malware in ppa's at all. I remember like one case years ago and it was quickly removed, but also I remember there was some malware in the opensuse repos, (that was quickly removed too).
In this case I got tired of ie, sending bugs to Feral only to get them discarded because I was not using Ubuntu, most Steam Games will explicitly state that Ubuntu is supported. otoh I never got a bug discarded because I was using a ppa. But ofc as anything in the Linux gamesphere, there's some devs that don't give a rat ass, and if you report a bug they will discard the bug with the first excuse they find (quite common).
So, obviously security vulnerabilities are bad and I'm going to update ASAP, but just how bad are these, really? Do I have to worry about some carefully crafted bad GIF on a shady website making my GPU run arbitrary code as root, or what?
While you're here, please consider supporting GamingOnLinux on:

Patreon, Liberapay or PayPal Donation.

We have no adverts, no paywalls, no timed exclusive articles. Just good, fresh content. Without your continued support, we simply could not continue!

You can find even more ways to support us on this dedicated page any time. If you already are, thank you!
Login / Register

Or login with...
Sign in with Steam Sign in with Twitter Sign in with Google
Social logins require cookies to stay logged in.

Livestreams & Videos
Community Livestreams
Latest Forum Posts