CVE-2022-31609: High severity Nvidia Virtual GPU vulnerability
NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where it allows the guest VM to allocate resources for which the guest is not authorized. This vulnerability may lead to loss of data integrity and confidentiality, denial of service, or information disclosure.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2022-31609?
CVE-2022-31609 has been assigned a high severity rating due to its potential impact on data integrity and confidentiality.
How do I fix CVE-2022-31609?
To fix CVE-2022-31609, you should update to the latest version of NVIDIA vGPU software that addresses this vulnerability.
What are the potential impacts of CVE-2022-31609?
The impacts of CVE-2022-31609 can include loss of data integrity, confidentiality breaches, denial of service, or information disclosure.
Which versions of NVIDIA vGPU Software are affected by CVE-2022-31609?
CVE-2022-31609 affects NVIDIA vGPU Software versions 11.0 to 11.8, 13.0 to 13.3, and specifically versions 14.0 and 14.1.
Can CVE-2022-31609 be exploited remotely?
Yes, CVE-2022-31609 can potentially be exploited by unauthorized guest VMs to allocate resources improperly.