update: x11-drivers/nvidia-drivers

[tormath1]

Name: x11-drivers/nvidia-drivers
CVEs: CVE-2024-0131, CVE-2024-0147, CVE-2024-0149, CVE-2024-0150, CVE-2024-53869
CVSSs: 4.4, 5.5, 3.3, 7.1, 5.5
Action Needed: upgrade to >= 535.230.02

Summary:

• CVE-2024-0150: NVIDIA GPU display driver for Windows and Linux contains a vulnerability where data is written past the end or before the beginning of a buffer. A successful exploit of this vulnerability might lead to information disclosure, denial of service, or data tampering.

• CVE-2024-0147: NVIDIA GPU display driver for Windows and Linux contains a vulnerability where referencing memory after it has been freed can lead to denial of service or data tampering.

• CVE-2024-53869: NVIDIA Unified Memory driver for Linux contains a vulnerability where an attacker could leak uninitialized memory. A successful exploit of this vulnerability might lead to information disclosure.

• CVE-2024-0131: NVIDIA GPU kernel driver for Windows and Linux contains a vulnerability where a potential user-mode attacker could read a buffer with an incorrect length. A successful exploit of this vulnerability might lead to denial of service.

• CVE-2024-0149: NVIDIA GPU Display Driver for Linux contains a vulnerability which could allow an attacker unauthorized access to files. A successful exploit of this vulnerability might lead to limited information disclosure.

refmap.gentoo: https://bugs.gentoo.org/948212

[sayanchowdhury]

CVE-2024-53869 is also fixed in 535.230.02 as per https://bugs.gentoo.org/948212

[sayanchowdhury]

Fixed in flatcar/scripts#2694 and cherry-picked to Beta.