Geeks3D Forums

Tech Forums => 3D-Tech News Around The Web => Topic started by: JeGX on January 10, 2018, 06:08:44 PM

Title: NVIDIA GPU Display Driver Security Updates for Speculative Side Channels
Post by: JeGX on January 10, 2018, 06:08:44 PM
NVIDIA has released GeForce 390.65 (http://www.geeks3d.com/20180108/nvidia-geforce-390-65-whql-gaming-drivers-released-vulkan-1-0-65/) two days ago with security updates against Spectre based attacks.

Quote
NVIDIA is providing an initial security update to mitigate aspects of Google Project Zero’s January 3, 2018 publication of novel information disclosure attacks that combine CPU speculative execution with known side channels.

The vulnerability has three known variants:

- Variant 1 (CVE-2017-5753): Mitigations are provided with the security update included in this bulletin. NVIDIA expects to work together with its ecosystem partners on future updates to further strengthen mitigations.

- Variant 2 (CVE-2017-5715): NVIDIA’s initial analysis indicates that the NVIDIA GPU Display Driver is potentially affected by this variant. NVIDIA expects to work together with its ecosystem partners on future updates for this variant.

- Variant 3 (CVE-2017-5754): At this time, NVIDIA has no reason to believe that the NVIDIA GPU Display Driver is vulnerable to this variant.

More information: http://nvidia.custhelp.com/app/answers/detail/a_id/4611
Title: Re: NVIDIA GPU Display Driver Security Updates for Speculative Side Channels
Post by: JeGX on January 10, 2018, 06:15:04 PM
More links:
- Spectre mitigations arrive in latest Nvidia GPU drivers (http://www.zdnet.com/article/spectre-mitigations-arrive-in-latest-nvidia-gpu-drivers/)

- Nvidia's admits its GPUs are affected by Spectre flaws (https://www.theinquirer.net/inquirer/news/3024192/nvidias-gpus-affected-by-spectre-flaw-but-patches-will-squash-the-processor-bugs)

- Nvidia updates graphics drivers to protect against Spectre CPU attacks (https://www.pcworld.com/article/3247246/components-graphics/nvidia-updates-graphics-drivers-to-protect-against-spectre-cpu-attacks.html)