PT-2022-15148 · Nvidia+2 · Nvidia Gpu Display Driver+2

Published 2022-02-01 · Updated 2023-10-13 · CVE-2022-21814

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

Name of the Vulnerable Software and Affected Versions NVIDIA GPU Display Driver for Linux (affected versions not specified)

Description The issue arises from improper handling of insufficient permissions or privileges in the kernel driver package, allowing an unprivileged local user limited write access to protected memory. This can lead to denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Improper Handling of Exceptional Conditions

Weakness Enumeration

CWE-755

CWE-280

Related Identifiers

CVE-2022-21814

USN-5276-1

Affected Products

Linuxmint

Nvidia Gpu Display Driver

Ubuntu

References · 15

• https://osv.dev/vulnerability/USN-5276-1 · Vendor Advisory
• https://nvidia.custhelp.com/app/answers/detail/a_id/5312 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-21814 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-5276-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-21814 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-21814 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-21813 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-21814 · Security Note
• https://security.gentoo.org/glsa/202310-02 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-21814 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-21814 · Security Note
• https://osv.dev/vulnerability/CVE-2022-21814 · Vendor Advisory
• https://t.me/cvenotify/35679 · Telegram Post
• https://t.me/cvenotify/26406 · Telegram Post
• https://t.me/cibsecurity/36968 · Telegram Post