VulnerabilityModified
CVE-2022-21813
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel driver, where improper handling of insufficient permissions or privileges may allow an unprivileged local user limited write access to protected memory, which can lead to denial…
MEDIUM 6.1EPSS 0.23%
Does this matter?
Lower severity and a low EPSS score (0.23%). Track it; it rarely justifies an emergency change on its own.
Description
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel driver, where improper handling of insufficient permissions or privileges may allow an unprivileged local user limited write access to protected memory, which can lead to denial of service.
- CVSS 3.1
- 6.1 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H
- EPSS
- 0.23% probability · 14th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-284, CWE-755
- Affected
- nvidia/cloud gaming guest · nvidia/geforce · nvidia/gpu display driver · nvidia/nvs · nvidia/quadro · nvidia/rtx · nvidia/tesla · nvidia/virtual gpu
- Source
- psirt@nvidia.com
References
- https://nvidia.custhelp.com/app/answers/detail/a_id/5312Vendor Advisory
- https://security.gentoo.org/glsa/202310-02Third Party Advisory
- https://nvidia.custhelp.com/app/answers/detail/a_id/5312Vendor Advisory
- https://security.gentoo.org/glsa/202310-02Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.