PT-2022-15147 · Nvidia+2 · Nvidia Gpu Display Driver+2

Published 2022-02-01 · Updated 2023-10-13 · CVE-2022-21813

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

Name of the Vulnerable Software and Affected Versions NVIDIA GPU Display Driver for Linux (affected versions not specified)

Description The issue arises from improper handling of insufficient permissions or privileges in the kernel driver, allowing an unprivileged local user to have limited write access to protected memory. This can lead to denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Improper Access Control

Improper Handling of Exceptional Conditions

Weakness Enumeration

CWE-284

CWE-755

Related Identifiers

CVE-2022-21813

USN-5276-1

Affected Products

Linuxmint

Nvidia Gpu Display Driver

Ubuntu

References · 15

• https://osv.dev/vulnerability/CVE-2022-21813 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-21813 · Vendor Advisory
• https://osv.dev/vulnerability/USN-5276-1 · Vendor Advisory
• https://nvidia.custhelp.com/app/answers/detail/a_id/5312 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-21813 · Security Note
• https://ubuntu.com/security/notices/USN-5276-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-21813 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-21813 · Vendor Advisory
• https://security.gentoo.org/glsa/202310-02 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-21813 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-21814 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-21813 · Security Note
• https://t.me/cibsecurity/36969 · Telegram Post
• https://t.me/cvenotify/26407 · Telegram Post
• https://t.me/cvenotify/26694 · Telegram Post