CVE-2022-28183: High severity Nvidia Gpu Display Driver Linux vulnerability
Published May 17, 2022
·Updated
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where an unprivileged regular user can cause an out-of-bounds read, which may lead to denial of service and information disclosure.
Affected Software
12 affected componentsFixes available
Nvidia Gpu Display Driver Linux
Nvidia Gpu Display Driver Windows
Nvidia Virtual GPU>=11.0<11.8
Nvidia Virtual GPU>=13.0<13.3
Nvidia Virtual GPU=14.0
debian/nvidia-graphics-drivers<470.129.06-1
470.129.06-1
debian/nvidia-graphics-drivers<470.129.06-1
470.129.06-1
debian/nvidia-graphics-drivers<470.129.06-1
470.129.06-1
debian/nvidia-graphics-drivers-tesla-470<470.129.06-1
470.129.06-1
debian/nvidia-graphics-drivers
535.261.03-1535.309.01-0+deb12u1550.163.01-2550.163.01-5.1550.163.01-6
debian/nvidia-graphics-drivers-tesla-460<=460.106.00-24
debian/nvidia-graphics-drivers-tesla-470
470.256.02-1~deb12u1470.256.02-10
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/nvidia-graphics-driversto a version that resolves this vulnerability.Fixed in 535.261.03-1Fixed in 535.309.01-0+deb12u1Fixed in 550.163.01-2Fixed in 550.163.01-5.1Fixed in 550.163.01-6 - Upgrade
Upgrade
debian/nvidia-graphics-drivers-tesla-470to a version that resolves this vulnerability.Fixed in 470.256.02-1~deb12u1Fixed in 470.256.02-10 - Upgrade
Upgrade
debian/nvidia-graphics-driversto a version that resolves this vulnerability.Fixed in 470.129.06-1 - Upgrade
Upgrade
debian/nvidia-graphics-drivers-tesla-470to a version that resolves this vulnerability.Fixed in 470.129.06-1
Event History
May 17, 2022
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverityWeakness
Data Sourced
via OSV·08:15 PM
DescriptionSeverityAffected Software