Debian dla-4753 ： firmware-nvidia-gsp - 安全性更新
high Nessus Plugin ID 339046
語言:
概要
遠端 Debian 主機上缺少一個或多個安全性更新。說明
遠端 Debian 12 主機已安裝的套件會受到 dla-4753 公告中提及的多個弱點影響。------------------------------------------------------------------------- Debian LTS 公告 DLA-4753-1 [email protected] https://www.debian.org/lts/security/Tobias Frost 2026 年 8 月 24 日 https://wiki.debian.org/LTS-------------------------------------------------------------------------
套件：nvidia-graphics-drivers 版本：535.309.01-0+deb12u1 CVE ID： CVE-2025-23280 CVE-2025-23282 CVE-2025-23300 CVE-2025-23330 CVE-2025-23332 CVE-2025-23345 CVE-2025-33219 Debian 錯誤：1118679
Debian 12 的 nvidia-graphics-drivers 更新 （bookworm） 會將 NVIDIA 驅動程式從版本 535.261.03 更新為 535.309.01。此更新解決了影響 NVIDIA 驅動程式堆疊的多個安全性弱點。
除了驅動程式更新之外，輔助套件 nvidia-settings 和 nvidia-modprobe 也已更新為 535.309.01-0+deb12u1，因為這些是較新的驅動程式所必需的。
有關 nvidia-graphics-drivers 的詳細安全狀態和漏洞詳情，請參閱 https://security-tracker.debian.org/tracker/nvidia-graphics-drivers
對於 Debian 12 書蟲，這些問題已在 535.309.01-0+deb12u1 版本中修復。
建議您升級 nvidia-graphics-drivers 套件。
如需 nvidia-graphics-drivers 的詳細安全性狀態，請參閱其安全性追蹤器頁面：
https://security-tracker.debian.org/tracker/nvidia-graphics-drivers
有關 Debian LTS 安全公告、如何將這些更新套用至您的系統以及常見問題的更多資訊，請參閱：
https://wiki.debian.org/LTSAttachment:signature.ascDescription: PGP 簽名
Tenable 已直接從 Debian 安全公告擷取前置描述區塊。
請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。
解決方案
升級 firmware-nvidia-gsp 套件。另請參閱
https://packages.debian.org/source/bookworm/nvidia-graphics-drivers
https://security-tracker.debian.org/tracker/CVE-2025-23280
https://security-tracker.debian.org/tracker/CVE-2025-23282
https://security-tracker.debian.org/tracker/CVE-2025-23300
https://security-tracker.debian.org/tracker/CVE-2025-23330
https://security-tracker.debian.org/tracker/CVE-2025-23332
https://security-tracker.debian.org/tracker/CVE-2025-23345
Plugin 詳細資訊
嚴重性: High
ID: 339046
檔案名稱: debian_DLA-4753.nasl
版本: 1.1
類型: Local
代理程式: unix
已發布: 2026/8/24
已更新: 2026/8/24
支援的感應器: Frictionless Assessment Agent, Nessus Agent, Agentless Assessment, Continuous Assessment, Tenable Cloud Security, Tenable Self-Hosted Container Security, Nessus
風險資訊
VPR
風險因素: Medium
分數: 5
百分位數: 94.55
CVSS v2
風險因素: Medium
基本分數: 6.8
時間性分數: 5
媒介: CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C
CVSS 評分資料來源: CVE-2025-33219
CVSS v3
風險因素: High
基本分數: 7.8
時間性分數: 6.8
媒介: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
時間媒介: CVSS:3.0/E:U/RL:O/RC:C
弱點資訊
CPE: cpe:/o:debian:debian_linux:12.0, p-cpe:/a:debian:debian_linux:firmware-nvidia-gsp, p-cpe:/a:debian:debian_linux:libcuda1, p-cpe:/a:debian:debian_linux:libcudadebugger1, p-cpe:/a:debian:debian_linux:libegl-nvidia0, p-cpe:/a:debian:debian_linux:libgl1-nvidia-glvnd-glx, p-cpe:/a:debian:debian_linux:libgles-nvidia1, p-cpe:/a:debian:debian_linux:libgles-nvidia2, p-cpe:/a:debian:debian_linux:libglx-nvidia0, p-cpe:/a:debian:debian_linux:libnvcuvid1, p-cpe:/a:debian:debian_linux:libnvidia-allocator1, p-cpe:/a:debian:debian_linux:libnvidia-api1, p-cpe:/a:debian:debian_linux:libnvidia-cfg1, p-cpe:/a:debian:debian_linux:libnvidia-eglcore, p-cpe:/a:debian:debian_linux:libnvidia-encode1, p-cpe:/a:debian:debian_linux:libnvidia-fbc1, p-cpe:/a:debian:debian_linux:libnvidia-glcore, p-cpe:/a:debian:debian_linux:libnvidia-glvkspirv, p-cpe:/a:debian:debian_linux:libnvidia-ml1, p-cpe:/a:debian:debian_linux:libnvidia-ngx1, p-cpe:/a:debian:debian_linux:libnvidia-nvvm4, p-cpe:/a:debian:debian_linux:libnvidia-opticalflow1, p-cpe:/a:debian:debian_linux:libnvidia-pkcs11-openssl3, p-cpe:/a:debian:debian_linux:libnvidia-ptxjitcompiler1, p-cpe:/a:debian:debian_linux:libnvidia-rtcore, p-cpe:/a:debian:debian_linux:libnvoptix1, p-cpe:/a:debian:debian_linux:nvidia-alternative, p-cpe:/a:debian:debian_linux:nvidia-cuda-mps, p-cpe:/a:debian:debian_linux:nvidia-detect, p-cpe:/a:debian:debian_linux:nvidia-driver-bin, p-cpe:/a:debian:debian_linux:nvidia-driver-full, p-cpe:/a:debian:debian_linux:nvidia-driver-libs, p-cpe:/a:debian:debian_linux:nvidia-driver, p-cpe:/a:debian:debian_linux:nvidia-egl-common, p-cpe:/a:debian:debian_linux:nvidia-egl-icd, p-cpe:/a:debian:debian_linux:nvidia-kernel-dkms, p-cpe:/a:debian:debian_linux:nvidia-kernel-source, p-cpe:/a:debian:debian_linux:nvidia-kernel-support, p-cpe:/a:debian:debian_linux:nvidia-legacy-check, p-cpe:/a:debian:debian_linux:nvidia-libopencl1, p-cpe:/a:debian:debian_linux:nvidia-opencl-common, p-cpe:/a:debian:debian_linux:nvidia-opencl-icd, p-cpe:/a:debian:debian_linux:nvidia-powerd, p-cpe:/a:debian:debian_linux:nvidia-smi, p-cpe:/a:debian:debian_linux:nvidia-suspend-common, p-cpe:/a:debian:debian_linux:nvidia-vdpau-driver, p-cpe:/a:debian:debian_linux:nvidia-vulkan-common, p-cpe:/a:debian:debian_linux:nvidia-vulkan-icd, p-cpe:/a:debian:debian_linux:xserver-xorg-video-nvidia
必要的 KB 項目: Host/local_checks_enabled, Host/Debian/release, Host/Debian/dpkg-l
可輕鬆利用: No known exploits are available
修補程式發佈日期: 2026/8/24
弱點發布日期: 2025/10/9
參考資訊
CVE: CVE-2025-23280, CVE-2025-23282, CVE-2025-23300, CVE-2025-23330, CVE-2025-23332, CVE-2025-23345, CVE-2025-33219