Medium severity · published Feb 7, 2022
CVE-2022-21813
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel driver, where improper handling of insufficient permissions or privileges may allow an unprivileged…
6.1
CVSS
0.2%
EPSS
No
On KEV
Description
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel driver, where improper handling of insufficient permissions or privileges may allow an unprivileged local user limited write access to protected memory, which can lead to denial of service.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
None
Integrity
Low
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 14% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CG
Cloud Gaming Guest · Nvidia
All versions, or not specified · source: NVD
GE
Geforce · Nvidia
All versions, or not specified · source: NVD
GD
Gpu Display Driver · Nvidia
All versions, or not specified · source: NVD
NV
Nvs · Nvidia
All versions, or not specified · source: NVD
QU
Quadro · Nvidia
All versions, or not specified · source: NVD
RT
Rtx · Nvidia
All versions, or not specified · source: NVD
TE
Tesla · Nvidia
All versions, or not specified · source: NVD
VG
Virtual Gpu · Nvidia
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-21813
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-21813
Vendor Advisory
https://nvidia.custhelp.com/app/answers/detail/a_id/5312
Third Party Advisory
https://security.gentoo.org/glsa/202310-02
More from Cloud Gaming Guest
7.8
CVE-2022-31617
NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys), where a local user with basic capabilities can cause an out-of-bounds read,…
7.8
CVE-2022-31610
NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys), where a local user with basic capabilities can cause an out-of-bounds…
7.8
CVE-2022-31607
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko), where a local user with basic capabilities can cause improper input validation,…
7.8
CVE-2022-31606
NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where a failure to properly validate data might…
7.1
CVE-2022-31616
NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where a local user with basic capabilities can…
