CVE-2022-28181: Critical severity Nvidia Virtual GPU vulnerability
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where an unprivileged regular user on the network can cause an out-of-bounds write through a specially crafted shader, which may lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering. The scope of the impact may extend to other components.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/nvidia-graphics-driversto a version that resolves this vulnerability.Fixed in 535.261.03-1Fixed in 535.309.01-0+deb12u1Fixed in 550.163.01-2Fixed in 550.163.01-5.1Fixed in 550.163.01-6 - Upgrade
Upgrade
debian/nvidia-graphics-drivers-legacy-390xxto a version that resolves this vulnerability.Fixed in 390.157-16 - Upgrade
Upgrade
debian/nvidia-graphics-drivers-tesla-450to a version that resolves this vulnerability.Fixed in 450.248.02-14 - Upgrade
Upgrade
debian/nvidia-graphics-drivers-tesla-470to a version that resolves this vulnerability.Fixed in 470.256.02-1~deb12u1Fixed in 470.256.02-10 - Upgrade
Upgrade
debian/nvidia-graphics-driversto a version that resolves this vulnerability.Fixed in 470.129.06-1 - Upgrade
Upgrade
debian/nvidia-graphics-drivers-tesla-470to a version that resolves this vulnerability.Fixed in 470.129.06-1
Event History
Frequently Asked Questions
What is the severity of CVE-2022-28181?
The severity of CVE-2022-28181 is critical.
How does CVE-2022-28181 affect NVIDIA Virtual GPU?
CVE-2022-28181 affects NVIDIA Virtual GPU with versions between 11.0 and 11.8, versions between 13.0 and 13.3, and version 14.0.
Can an unprivileged regular user on the network exploit CVE-2022-28181?
Yes, an unprivileged regular user on the network can exploit CVE-2022-28181.
What is the impact of CVE-2022-28181?
The impact of CVE-2022-28181 includes potential code execution, denial of service, escalation of privileges, and information disclosure.
Where can I find more information about CVE-2022-28181?
You can find more information about CVE-2022-28181 at the following references: [link1](https://nvidia.custhelp.com/app/answers/detail/a_id/5353) and [link2](https://security.gentoo.org/glsa/202310-02).