CVE-2022-21814: Medium severity Nvidia Geforce vulnerability
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel driver package, where improper handling of insufficient permissions or privileges may allow an unprivileged local user limited write access to protected memory, which can lead to denial of service.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/nvidia-graphics-driversto a version that resolves this vulnerability.Fixed in 535.261.03-1Fixed in 535.309.01-0+deb12u1Fixed in 550.163.01-2Fixed in 550.163.01-5.1Fixed in 550.163.01-6 - Upgrade
Upgrade
debian/nvidia-graphics-drivers-tesla-470to a version that resolves this vulnerability.Fixed in 470.256.02-1~deb12u1Fixed in 470.256.02-10 - Upgrade
Upgrade
debian/nvidia-graphics-driversto a version that resolves this vulnerability.Fixed in 470.103.01-1 - Upgrade
Upgrade
debian/nvidia-graphics-drivers-tesla-470to a version that resolves this vulnerability.Fixed in 470.103.01-1
Event History
Frequently Asked Questions
What is CVE-2022-21814?
CVE-2022-21814 is a vulnerability in the NVIDIA GPU Display Driver for Linux that allows an unprivileged local user limited write access to protected memory.
What software is affected by CVE-2022-21814?
The affected software includes Nvidia Geforce, Nvidia Gpu Display Driver, Nvidia Nvs, Nvidia Quadro, Nvidia Rtx, and Nvidia Tesla.
What is the severity of CVE-2022-21814?
The severity of CVE-2022-21814 is medium.
How can an attacker exploit CVE-2022-21814?
An attacker can exploit CVE-2022-21814 by leveraging insufficient permissions or privileges to gain limited write access to protected memory.
Are there any references for CVE-2022-21814?
Yes, you can find more information about CVE-2022-21814 in the following references: 1. [Nvidia Customer Help Center](https://nvidia.custhelp.com/app/answers/detail/a_id/5312) 2. [Gentoo Linux Security Advisory](https://security.gentoo.org/glsa/202310-02)