VulnerabilityModified
CVE-2022-21814
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel driver package, where improper handling of insufficient permissions or privileges may allow an unprivileged local user limited write access to protected memory, which can lead to…
MEDIUM 6.1EPSS 0.23%
Does this matter?
Lower severity and a low EPSS score (0.23%). Track it; it rarely justifies an emergency change on its own.
Description
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel driver package, where improper handling of insufficient permissions or privileges may allow an unprivileged local user limited write access to protected memory, which can lead to denial of service.
- CVSS 3.1
- 6.1 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H
- EPSS
- 0.23% probability · 14th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-280, CWE-755
- Affected
- nvidia/geforce · nvidia/gpu display driver · nvidia/nvs · nvidia/quadro · nvidia/rtx · nvidia/tesla
- Source
- psirt@nvidia.com
References
- https://nvidia.custhelp.com/app/answers/detail/a_id/5312Vendor Advisory
- https://security.gentoo.org/glsa/202310-02Third Party Advisory
- https://nvidia.custhelp.com/app/answers/detail/a_id/5312Vendor Advisory
- https://security.gentoo.org/glsa/202310-02Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.