PT-2022-3229 · Nvidia · Nvidia Gpu Display Driver

Published 2022-03-30 · Updated 2022-05-26 · CVE-2022-28187

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions NVIDIA GPU Display Driver for Windows (affected versions not specified)

Description The issue is related to the kernel mode layer (nvlddmkm.sys) of the NVIDIA GPU Display Driver for Windows, where the memory management software fails to release a resource after its effective lifetime has ended. This can lead to denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Release of Resource after Effective Lifetime

Weakness Enumeration

CWE-772

Related Identifiers

BDU:2022-03932

CVE-2022-28187

Affected Products

Nvidia Gpu Display Driver

References · 9

• https://bdu.fstec.ru/vul/2022-03932 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-28187 · Security Note
• https://cve.org/CVERecord?id=CVE-2022-28187 · Security Note
• https://ubuntu.com/security/CVE-2022-28187 · Vendor Advisory
• https://nvidia.custhelp.com/app/answers/detail/a_id/5353 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-28187 · Vendor Advisory
• https://vuldb.com/?id.200220 · Note
• https://t.me/cibsecurity/42877 · Telegram Post
• https://t.me/cvenotify/30372 · Telegram Post