Nvidia rooted by Linux graphics bug
Security researchers have published an exploit that highlights a long-standing security bug in Nvidia graphic drivers for Linux. Nvidia Driver For Linux v8774 and v8762 are subject to a buffer overflow bug that creates a means for hackers to inject hostile code as root. The bug might be exploited locally or remotely, providing malicious hackers are able to trick users into visiting a maliciously-constructed website.
Nvidia drivers for Solaris and FreeBSD, as well as earlier versions of Nvidia's closed-source Linux driver, are also likely to be vulnerable, according to security firm Rapid7, which published an advisory on the issue on Monday. Nvidia supplied two graphic drivers for Linux - a closed source "binary blob" driver, which is subject to the vulnerability, and an open source driver, which is not subject to the bug. However, the open source driver lacks the acceleration features found in the closed source driver.
