CVE-2022-28181
First published: Tue May 17 2022(Updated: )
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where an unprivileged regular user on the network can cause an out-of-bounds write through a specially crafted shader, which may lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering. The scope of the impact may extend to other components.
Credit: psirt@nvidia.com psirt@nvidia.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| NVIDIA Virtual GPU | >=11.0<11.8 | |
| NVIDIA Virtual GPU | >=13.0<13.3 | |
| NVIDIA Virtual GPU | =14.0 | |
| Linux Linux kernel | ||
| Microsoft Windows | ||
| Nvidia Gpu Display Driver | ||
| Nvidia Gpu Display Driver |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2022-28181?
The severity of CVE-2022-28181 is critical.
How does CVE-2022-28181 affect NVIDIA Virtual GPU?
CVE-2022-28181 affects NVIDIA Virtual GPU with versions between 11.0 and 11.8, versions between 13.0 and 13.3, and version 14.0.
Can an unprivileged regular user on the network exploit CVE-2022-28181?
Yes, an unprivileged regular user on the network can exploit CVE-2022-28181.
What is the impact of CVE-2022-28181?
The impact of CVE-2022-28181 includes potential code execution, denial of service, escalation of privileges, and information disclosure.
Where can I find more information about CVE-2022-28181?
You can find more information about CVE-2022-28181 at the following references: [link1](https://nvidia.custhelp.com/app/answers/detail/a_id/5353) and [link2](https://security.gentoo.org/glsa/202310-02).
- collector/nvd-api
- collector/nvd-index
- agent/severity
- agent/weakness
- agent/author
- agent/tags
- agent/type
- agent/references
- agent/description
- agent/event
- agent/softwarecombine
- agent/first-publish-date
- agent/last-modified-date
- agent/remedy
- collector/mitre-cve
- source/MITRE
- vendor/nvidia
- canonical/nvidia virtual gpu
- version/nvidia virtual gpu/11.0
- version/nvidia virtual gpu/13.0
- version/nvidia virtual gpu/14.0
- vendor/linux
- canonical/linux linux kernel
- vendor/microsoft
- canonical/microsoft windows
- canonical/nvidia gpu display driver