Privilege escalation security hole found in Nvidia Linux driver
An anonymous hacker has found a security hole in the Nvidia binary. He or she allegedly reported it to Nvidia "over a month ago" and did not receive a reply, nor was the flaw ever patched. The exploit has now been made public.
Software Engineer Dave Airlie was sent details of the vulnerability. After testing it out and discovering that it indeed works, he posted the exploit for everyone to see over at the mailing list full-disclosure @ lists.grok.org.uk
The flaw essentially allows an attacker to write to any part of memory on the system by shifting the VGA window after attaining superuser privileges.
