Hello,

I've installed kde neon, as is. without adding ppa for video drivers.
Like a grown up it has itself installed the nvidia driver 390.77 and works without me having to fiddle around in configurations/ppa/proprietary downloads/etc. Great.

Seeing in these link, the driver is vulnerable :
-- https://www.bleepingcomputer.com/news/s ... ows-linux/
-- https://nvidia.custhelp.com/app/answers ... /a_id/4772

so how does kde neon update these drivers ?
Do I have to do anything?
Is the driver that comes with kde neon a "one off"/static/"installed so at least you can use your video card from the get go" driver or will it be auto updated?

thanks.

The drivers are from Ubuntu, when installed, they will be updated like any other package on your system. When Ubuntu pushes the fix out, you will get it the next time you update your system. Ubuntu are usually pretty quick to get these out. I see that the drivers PPA has the updated driver for 19.04, so it probably won't take too long to get it out of testing and to normal releases.

Also of note, though the Windows drivers have serious issues, the Linux driver vulnerability is much less so:

NVIDIA graphics driver contains a vulnerability that may allow access to application data processed on the GPU through a side channel exposed by the GPU performance counters. Local user access is required. This vulnerability is not a network or remote attack vector.

The Windows versions have denial-of-service, escalation of privileges, code execution and information disclosure potentials.