First published: Tue May 17 2022(Updated: )
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where an unprivileged regular user can access administrator- privileged registers, which may lead to denial of service, information disclosure, and data tampering.
Credit: psirt@nvidia.com psirt@nvidia.com
Affected Software | Affected Version | How to fix |
---|---|---|
NVIDIA GPU Display Driver Linux | ||
NVIDIA GPU Display Driver | ||
NVIDIA vGPU Software | >=11.0<11.8 | |
NVIDIA vGPU Software | >=13.0<13.3 | |
NVIDIA vGPU Software | =14.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of CVE-2022-28184 is high with a severity value of 7.8.
CVE-2022-28184 affects NVIDIA GPU Display Driver for Windows and Linux, exposing a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape.
CVE-2022-28184 can lead to denial of service, information disclosure, and data tampering.
NVIDIA GPU Display Driver for Windows and Linux, as well as versions 11.0 to 11.8 and 13.0 to 13.3 of NVIDIA Virtual GPU are affected by CVE-2022-28184.
You can find more information about CVE-2022-28184 on the NVIDIA customer support website and the Gentoo security advisory.