CVE-2022-28184: High severity Nvidia Gpu Display Driver Linux vulnerability
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where an unprivileged regular user can access administrator- privileged registers, which may lead to denial of service, information disclosure, and data tampering.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/nvidia-graphics-driversto a version that resolves this vulnerability.Fixed in 535.261.03-1Fixed in 535.309.01-0+deb12u1Fixed in 550.163.01-2Fixed in 550.163.01-5.1Fixed in 550.163.01-6 - Upgrade
Upgrade
debian/nvidia-graphics-drivers-tesla-470to a version that resolves this vulnerability.Fixed in 470.256.02-1~deb12u1Fixed in 470.256.02-10 - Upgrade
Upgrade
debian/nvidia-graphics-driversto a version that resolves this vulnerability.Fixed in 470.129.06-1 - Upgrade
Upgrade
debian/nvidia-graphics-drivers-tesla-470to a version that resolves this vulnerability.Fixed in 470.129.06-1
Event History
Frequently Asked Questions
What is the severity of CVE-2022-28184?
The severity of CVE-2022-28184 is high with a severity value of 7.8.
How does CVE-2022-28184 affect NVIDIA GPU Display Driver?
CVE-2022-28184 affects NVIDIA GPU Display Driver for Windows and Linux, exposing a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape.
What are the potential impacts of CVE-2022-28184?
CVE-2022-28184 can lead to denial of service, information disclosure, and data tampering.
Which software versions are affected by CVE-2022-28184?
NVIDIA GPU Display Driver for Windows and Linux, as well as versions 11.0 to 11.8 and 13.0 to 13.3 of NVIDIA Virtual GPU are affected by CVE-2022-28184.
How can I get more information about CVE-2022-28184?
You can find more information about CVE-2022-28184 on the NVIDIA customer support website and the Gentoo security advisory.