Bug 28854 - Update request: nvidia-current-460.73.01-1.mga8.nonfree
Summary: Update request: nvidia-current-460.73.01-1.mga8.nonfree
Status: RESOLVED FIXED
Alias: None
Product: Mageia
Classification: Unclassified
Component: Security (show other bugs)
Version: 8
Hardware: x86_64 Linux
Priority: Normal normal
Target Milestone: ---
Assignee: QA Team
QA Contact: Sec team
URL:
Whiteboard: MGA7TOO MGA7-64-OK MGA8-64-OK
Keywords: advisory, validated_update
: 28857 (view as bug list)
Depends on:
Blocks:
 
Reported: 2021-04-29 15:56 CEST by Thomas Backlund
Modified: 2021-05-02 18:31 CEST (History)
6 users (show)

See Also:
Source RPM: nvidia-current
CVE: CVE‑2021‑1076, CVE‑2021‑1077
Status comment:


Attachments

Description Thomas Backlund 2021-04-29 15:56:16 CEST
bug fixes, more hw support, support for newer kernels

SRPM:
nvidia-current-460.73.01-1.mga8.nonfree.src.rpm


x86_64:
dkms-nvidia-current-460.73.01-1.mga8.nonfree.x86_64.rpm
nvidia-current-cuda-opencl-460.73.01-1.mga8.nonfree.x86_64.rpm
nvidia-current-devel-460.73.01-1.mga8.nonfree.x86_64.rpm
nvidia-current-doc-html-460.73.01-1.mga8.nonfree.x86_64.rpm
nvidia-current-lib32-460.73.01-1.mga8.nonfree.x86_64.rpm
nvidia-current-utils-460.73.01-1.mga8.nonfree.x86_64.rpm
x11-driver-video-nvidia-current-460.73.01-1.mga8.nonfree.x86_64.rpm
Comment 1 Thomas Backlund 2021-04-29 17:40:00 CEST
ldetect-lst-0.6.26.3-1.mga8 is also part of this update
Comment 2 Len Lawrence 2021-04-30 08:52:44 CEST
Installed all the packages from nonfree and core updates_testing, including ldetect-lst.

After the reboot:
Kernel: 5.10.30-desktop-1.mga8 x86_64
10-Core Intel Core i9-7900X
NVIDIA GP102 [GeForce GTX 1080 Ti] driver: nvidia v: 460.73.01

The MATE desktop continues to function.  Ran stellarium, glmark2, teapot, glxspheres, LO writer, GIMP, firefox, eom, ristretto.
$ locate OpenCL
/etc/OpenCL
/etc/OpenCL/vendors
/etc/OpenCL/vendors/nvidia.icd
/usr/lib64/libOpenCL.so.1
/usr/lib64/libOpenCL.so.1.0.0

# urpmi clinfo
$ clinfo
Number of platforms                               1
  Platform Name                                   NVIDIA CUDA
  Platform Vendor                                 NVIDIA Corporation
  Platform Version                                OpenCL 1.2 CUDA 11.2.162
  Platform Profile                                FULL_PROFILE
  Platform Extensions                             cl_khr_global_int32_base_atomics cl_khr_global_int32_extended_atomics cl_khr_local_int32_base_atomics cl_khr_local_int32_extended_atomics cl_khr_fp64 cl_khr_byte_addressable_store cl_khr_icd cl_khr_gl_sharing cl_nv_compiler_options cl_nv_device_attribute_query cl_nv_pragma_unroll cl_nv_copy_opts cl_nv_create_buffer cl_khr_int64_base_atomics cl_khr_int64_extended_atomics cl_khr_device_uuid
  Platform Extensions function suffix             NV
..... lots of information .....
ICD loader properties
  ICD loader Name                                 OpenCL ICD Loader
  ICD loader Vendor                               OCL Icd free software
  ICD loader Version                              2.2.13
  ICD loader Profile                              OpenCL 3.0

Is there a simple way to exercise the CUDA cores?
$ apropos cuda
nvidia-cuda-mps-control (1) - NVIDIA CUDA Multi Process Service management pr...

That is not going to be simple.

Apart from that everything works with this hardware.

CC: (none) => tarazed25

Comment 3 Len Lawrence 2021-04-30 09:06:37 CEST
Referring to comment 2.  Looks like qgis uses OpenCL; it launches but that is as far as it goes.
Comment 4 Aurelien Oudelet 2021-04-30 09:36:51 CEST
Adding upstream security advisory.
This 460.73 update fixes CVE‑2021‑1076, CVE‑2021‑1077.

Reference: https://nvidia.custhelp.com/app/answers/detail/a_id/5172

Note also 465.24.02 is also released with many bugfix and hw support.

Component: RPM Packages => Security
CC: (none) => ouaurelien
CVE: (none) => CVE‑2021‑1076, CVE‑2021‑1077
QA Contact: (none) => security

Comment 5 Aurelien Oudelet 2021-04-30 09:37:29 CEST
*** Bug 28857 has been marked as a duplicate of this bug. ***

CC: (none) => pingvin

Comment 6 Aurelien Oudelet 2021-04-30 10:06:45 CEST
Advisory:
========================

Updated nvidia-current packages fix security vulnerabilities:

The updated nvidia-current packages fix:

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko) where improper access control may lead to denial of service, information disclosure, or data corruption (CVE-2021-1076).

NVIDIA GPU Display Driver for Linux contains a vulnerability where the software uses a reference count to manage a resource that is incorrectly updated, which may lead to denial of service (CVE-2021-1077).

This also adds support for newer hardware (RTX A5000, RTX A4000, T400, T600, T1000) and fixes some other bugs, see upstream announcement.

references:
 - https://bugs.mageia.org/show_bug.cgi?id=28854
 - https://nvidia.custhelp.com/app/answers/detail/a_id/5172
========================

Updated packages in core/updates_testing:
========================
ldetect-lst-0.6.26.3-1.mga8

from SRPM:
ldetect-lst-0.6.26.3-1.mga8.src.rpm

========================

Updated packages in nonfree/updates_testing:
========================

dkms-nvidia-current-460.73.01-1.mga8.nonfree.x86_64.rpm
nvidia-current-cuda-opencl-460.73.01-1.mga8.nonfree.x86_64.rpm
nvidia-current-devel-460.73.01-1.mga8.nonfree.x86_64.rpm
nvidia-current-doc-html-460.73.01-1.mga8.nonfree.x86_64.rpm
nvidia-current-lib32-460.73.01-1.mga8.nonfree.x86_64.rpm
nvidia-current-utils-460.73.01-1.mga8.nonfree.x86_64.rpm
x11-driver-video-nvidia-current-460.73.01-1.mga8.nonfree.x86_64.rpm

from SRPM:
nvidia-current-460.73.01-1.mga8.nonfree.src.rpm
Comment 7 Thomas Backlund 2021-04-30 11:47:00 CEST
Mga7 rpms:

SRPMS:
ldetect-lst-0.6.9.4-1.mga7.src.rpm

nvidia-current-460.73.01-1.mga7.nonfree.src.rpm

i586:
ldetect-lst-0.6.9.4-1.mga7.i586.rpm
ldetect-lst-devel-0.6.9.4-1.mga7.i586.rpm



x86_64:
ldetect-lst-0.6.9.4-1.mga7.x86_64.rpm
ldetect-lst-devel-0.6.9.4-1.mga7.x86_64.rpm

dkms-nvidia-current-460.73.01-1.mga7.nonfree.x86_64.rpm
nvidia-current-cuda-opencl-460.73.01-1.mga7.nonfree.x86_64.rpm
nvidia-current-devel-460.73.01-1.mga7.nonfree.x86_64.rpm
nvidia-current-doc-html-460.73.01-1.mga7.nonfree.x86_64.rpm
nvidia-current-utils-460.73.01-1.mga7.nonfree.x86_64.rpm
x11-driver-video-nvidia-current-460.73.01-1.mga7.nonfree.x86_64.rpm

Whiteboard: (none) => MGA7TOO

Comment 8 Mészáros Csaba 2021-04-30 12:49:22 CEST
Sorry guys, but on this page I checked what was going on, but there is no info on nvidia. That's why I sent it in. 28857
http://madb.mageia.org/tools/security

The point is that it has been resolved.
Thank You.
Comment 9 Aurelien Oudelet 2021-04-30 13:09:34 CEST
MGA7 Plasma x86_64 Intel Core i5 3570K, 16 GB DDR4-Ram

Upgrading OK
Using with nvidia-current 460.73.01 update OK (GTX 670)
Basic usage desktop, gaming, Firefox, Files operations, USB drives, Webcam OK.

MGA7-64-OK



MGA8 Plasma x86_64 Intel Core i5 6600K, 16 GB DDR4-Ram

Upgrading OK
Using nvidia-current 460.73.01 update OK (GTX 1660 Ti)
Same above usages OK.
Newtork shares OK.
Virtualbox Host.
    Windows and Linux Clients (M7 and M8) are OK.

MGA8-64-OK

Whiteboard: MGA7TOO => MGA7TOO MGA7-64-OK MGA8-64-OK

Thomas Backlund 2021-04-30 20:33:33 CEST

Keywords: (none) => advisory

Comment 10 Morgan Leijström 2021-05-01 22:26:13 CEST
Mga8-64 all OK so far, been using the system occasionally yesterday and today

Updated to testing:
* kernel 5.10.33-1
* nvidia-current-460.73.01-1 with CUDA and OpenCL
* systemd-246.13-2
* kernel-firmware-nonfree-20210426-1
Also everything else in testing (not yet the new virtualbox building today)

Hardware: My workstation "svarten": Mainboard: Sabertooth P67, CPU: i7-3770, RAM 16G, GM107 [GeForce GTX 750] using nvidia-current; GeForce 635 series and later, 4k display.

More test details in bug 28856#c8

CC: (none) => fri

Comment 11 PC LX 2021-05-02 11:47:25 CEST
Installed and tested without issue.

GPU: nVidia GT 1030
Kernel: 5.10.33-desktop-1.mga7
DE: Plasma, LXQt
Tested: glmark2, 3D games, steam 3D games, WebGL, blender, sweethome3d, waterfox, falkon, konqueror, chromium, chrome, CUDA, OpenCL, etc.


System: Mageia 7, x86_64, Plasma DE, LXQt DE, Intel CPU, nVidia GPU using nvidia-current proprietary driver.


$ uname -a
Linux marte 5.10.33-desktop-1.mga7 #1 SMP Thu Apr 29 14:25:20 UTC 2021 x86_64 x86_64 x86_64 GNU/Linux
$ lspcidrake | grep VGA
Card:NVIDIA GeForce 635 series and later: NVIDIA Corporation|GP108 [GeForce GT 1030] [DISPLAY_VGA] (rev: a1)
$ dkms status
nvidia-current, 460.73.01-1.mga7.nonfree, 5.10.30-desktop-1.mga7, x86_64: installed 
nvidia-current, 460.73.01-1.mga7.nonfree, 5.10.33-desktop-1.mga7, x86_64: installed 
$ rpm -qa | egrep '(^kernel|nvidia)' | sort
dkms-nvidia-current-460.73.01-1.mga7.nonfree
kernel-desktop-5.10.30-1.mga7-1-1.mga7
kernel-desktop-5.10.33-1.mga7-1-1.mga7
kernel-desktop-devel-5.10.30-1.mga7-1-1.mga7
kernel-desktop-devel-5.10.33-1.mga7-1-1.mga7
kernel-desktop-devel-latest-5.10.33-1.mga7
kernel-desktop-latest-5.10.33-1.mga7
kernel-firmware-20190603-1.mga7
kernel-firmware-nonfree-20210310-1.mga7.nonfree
kernel-userspace-headers-5.10.33-1.mga7
nvidia-current-cuda-opencl-460.73.01-1.mga7.nonfree
nvidia-current-doc-html-460.73.01-1.mga7.nonfree
nvidia-current-utils-460.73.01-1.mga7.nonfree
x11-driver-video-nvidia-current-460.73.01-1.mga7.nonfree

CC: (none) => mageia

Comment 12 Mészáros Csaba 2021-05-02 14:33:08 CEST
I also installed the new nvidia package from the testing repository and it appeared when dkms was running.

nvidia-uvm.ko.xz:
  - Uninstallation
    - Deleting from: /lib/modules/5.10.25-desktop-1.mga8/dkms/drivers/char/drm/
  - Original module
    - No original module was found for this module on this kernel.
    - Use the dkms install command to reinstall any previous module version.
/usr/sbin/dkms: Line 2006: echo: write error: Broken data channel
depmod.......

DKMS: uninstall Completed.

******************************************************
Maybe nothing serious, but it showed up.

There are three kernels on the machine,
5.10.25-desktop-1.mga8
5.10.27-desktop-1.mga8
5.10.30-desktop-1.mga8
I am currently using the 5.10.30 kernel
Thomas Backlund 2021-05-02 17:21:00 CEST

Keywords: (none) => validated_update
CC: (none) => sysadmin-bugs

Comment 13 Mageia Robot 2021-05-02 18:31:01 CEST
An update for this issue has been pushed to the Mageia Updates repository.

https://advisories.mageia.org/MGASA-2021-0203.html

Status: NEW => RESOLVED
Resolution: (none) => FIXED


Note You need to log in before you can comment on or make changes to this bug.