nvidia-beta-dkms

LOW

maintainer dbermond 71 votes scanned 2026-09-17 00:27:14.276658

View on AUR

Why flagged

The package downloads a self-extracting installer from an official NVIDIA domain (us.download.nvidia.com), which is standard for NVIDIA drivers on the AUR; the source is not executed remotely, and the build process involves unpacking and patching official kernel modules, posing no inherent security risk.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a self-extracting installer from an official NVIDIA domain (us.download.nvidia.com), which is standard for NVIDIA drivers on the AUR; the source is not executed remotely, and the build process involves unpacking and patching official kernel modules, posing no inherent security risk.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:23 source=("https://us.download.nvidia.com/XFree86/Linux-${CARCH}/${pkgver}/${_pkg}.run"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer : Daniel Bermond <dbermond@archlinux.org>
    
      2# Contributor: Sibren Vasse <arch at sibrenvasse dot nl>
    
      3# Contributor: Matt Welch <matt dot welch at gmail dot com>
    
      4# Contributor: Anish Bhatt <anish at gatech dot edu>
    
      5# Contributor: Det <nimetonmaili gmail a-dot com>
    
      6# Contributor: Alucryd <alucryd at gmail dot com>
    
      7# Contributor: Jason Melton <jason dot melton at gmail dot com>
    
      8# Contributor: Youpi <max dot flocard at gmail dot com>
    
      9# Contributor: sl1pkn07 <sl1pkn07 at gmail dot com>
    
      10
    
      11pkgname=nvidia-beta-dkms
    
      12pkgver=615.71.09
    
      13pkgrel=1
    
      14pkgdesc='NVIDIA kernel modules - module sources (beta version)'
    
      15arch=('x86_64')
    
      16url='https://www.nvidia.com/'
    
      17license=('LicenseRef-custom')
    
      18provides=("nvidia=${pkgver}" "nvidia-dkms=${pkgver}" "nvidia-beta=${pkgver}"
    
      19          'NVIDIA-MODULE')
    
      20conflicts=('nvidia' 'nvidia-dkms')
    
      21options=('!strip')
    
      22_pkg="NVIDIA-Linux-${CARCH}-${pkgver}-no-compat32"
    
      23source=("https://us.download.nvidia.com/XFree86/Linux-${CARCH}/${pkgver}/${_pkg}.run"
    
      24        '110-nvidia-change-dkms-conf.patch'
    
      25        '120-nvidia-linux-rt-gift.patch')
    
      26sha256sums=('e5545862c291f3991a91ee40dd9c7a71cccc69247a193d5e5b891bfd964ac104'
    
      27            '5a94430787c3e75c896af0a2af616491ec71ea60cc999f90fb5f17d9f0fe07ac'
    
      28            '291bc6568e18496a4c2e732fd8616f6d536d8e9f3ab51f1959e3fc08f0de126b')
    
      29
    
      30prepare() {
    
      31    # extract the source file
    
      32    [ -d "$_pkg" ] && rm -rf "$_pkg"
    
      33    printf '%s\n' "  -> Self-Extracting ${_pkg}.run..."
    
      34    sh "${_pkg}.run" --extract-only
    
      35    
    
      36    patch -d "$_pkg" -Np1 -i "${srcdir}/110-nvidia-change-dkms-conf.patch"
    
      37    patch -d "$_pkg" -Np1 -i "${srcdir}/120-nvidia-linux-rt-gift.patch"
    
      38}
    
      39
    
      40package() {
    
      41    depends=(
    
      42        'dkms'
    
      43        'libglvnd'
    
      44        "nvidia-utils-beta=${pkgver}")
    
      45    
    
      46    install -d -m755 "${pkgdir}/usr/src"
    
      47    cp -dr --no-preserve='ownership' "${_pkg}/kernel" "${pkgdir}/usr/src/nvidia-${pkgver}"
    
      48    install -D -m644 "${_pkg}/LICENSE" -t "${pkgdir}/usr/share/licenses/${pkgname}"
    
      49}
    
      50

Changes since previous scan

--- PKGBUILD @ 2026-09-13 00:19
+++ PKGBUILD @ 2026-09-17 00:27
@@ -9,7 +9,7 @@
 # Contributor: sl1pkn07 <sl1pkn07 at gmail dot com>
 
 pkgname=nvidia-beta-dkms
-pkgver=610.57.04
+pkgver=615.71.09
 pkgrel=1
 pkgdesc='NVIDIA kernel modules - module sources (beta version)'
 arch=('x86_64')
@@ -23,8 +23,8 @@
 source=("https://us.download.nvidia.com/XFree86/Linux-${CARCH}/${pkgver}/${_pkg}.run"
         '110-nvidia-change-dkms-conf.patch'
         '120-nvidia-linux-rt-gift.patch')
-sha256sums=('83619d878211aadf4c7e1c5de3d2a865c9936fb2dfa5c1b4c3aabccc20c3f283'
-            '03bb209054fba81aea3b16f4dc241b83612f2bb2267435e9f9e33b40966a79d7'
+sha256sums=('e5545862c291f3991a91ee40dd9c7a71cccc69247a193d5e5b891bfd964ac104'
+            '5a94430787c3e75c896af0a2af616491ec71ea60cc999f90fb5f17d9f0fe07ac'
             '291bc6568e18496a4c2e732fd8616f6d536d8e9f3ab51f1959e3fc08f0de126b')
 
 prepare() {

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-17 00:27:14	Low	2
2026-09-16 00:03:17	Low	2
2026-09-15 00:25:31	Low	2
2026-09-14 00:27:57	Low	2
2026-09-13 15:14:52	Medium	1
2026-09-13 00:19:54	Low	2
2026-09-12 00:25:17	Low	2
2026-09-11 00:19:22	Low	2
2026-09-10 00:22:44	Low	2
2026-09-09 00:04:09	Low	2
2026-09-08 00:18:08	Low	2
2026-09-07 00:30:15	Low	2
2026-09-06 00:17:06	Low	2
2026-09-05 00:16:27	Low	2
2026-09-04 00:03:13	Low	2
2026-09-03 00:15:47	Low	2
2026-09-02 00:02:31	Low	2
2026-09-01 00:11:19	Low	2
2026-08-31 00:19:57	Low	2
2026-08-30 00:04:14	Low	2