First published: Fri Nov 18 2022(Updated: )
NVIDIA GPU Display Driver for Linux contains a vulnerability in an optional D-Bus configuration file, where a local user with basic capabilities can impact protected D-Bus endpoints, which may lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.
Credit: psirt@nvidia.com psirt@nvidia.com
Affected Software | Affected Version | How to fix |
---|---|---|
Nvidia Gpu Display Driver | >=390<390.154 | |
Nvidia Gpu Display Driver | >=470<470.141.03 | |
Nvidia Gpu Display Driver | >=510<510.85.02 | |
Nvidia Gpu Display Driver | >=515<515.65.01 | |
Nvidia Geforce | ||
Nvidia Rtx | ||
Nvidia Gpu Display Driver | >=450<450.203.03 | |
Nvidia Tesla |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID for this NVIDIA GPU Display Driver for Linux vulnerability is CVE-2022-31608.
The severity of CVE-2022-31608 is high with a severity value of 7.8.
Nvidia Gpu Display Driver versions 390 to 515 on Linux are affected by this vulnerability.
The potential impacts of this vulnerability include code execution, denial of service, escalation of privileges, information disclosure, and data tampering.
You can find more information about this vulnerability at the following references: [1] https://nvidia.custhelp.com/app/answers/detail/a_id/5383, [2] https://security.gentoo.org/glsa/202310-02