ByteOS Network

NVD Vulnerability Details :

CVE-2022-28184

Analyzed

Source-psirt@nvidia.com

Published At-17 May, 2022 | 20:15

Updated At-15 Oct, 2023 | 01:55

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where an unprivileged regular user can access administrator- privileged registers, which may lead to denial of service, information disclosure, and data tampering.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	7.8	HIGH	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Secondary	3.1	7.1	HIGH	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Primary	2.0	4.6	MEDIUM	AV:L/AC:L/Au:N/C:P/I:P/A:P

CPE Matches

NVIDIA Corporation

>>gpu_display_driver>>-

cpe:2.3:a:nvidia:gpu_display_driver:-:*:*:*:*:linux:*:*

NVIDIA Corporation

>>gpu_display_driver>>-

cpe:2.3:a:nvidia:gpu_display_driver:-:*:*:*:*:windows:*:*

NVIDIA Corporation

>>virtual_gpu>>Versions from 11.0(inclusive) to 11.8(exclusive)

cpe:2.3:a:nvidia:virtual_gpu:*:*:*:*:*:*:*:*

NVIDIA Corporation

>>virtual_gpu>>Versions from 13.0(inclusive) to 13.3(exclusive)

cpe:2.3:a:nvidia:virtual_gpu:*:*:*:*:*:*:*:*

NVIDIA Corporation

>>virtual_gpu>>14.0

cpe:2.3:a:nvidia:virtual_gpu:14.0:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
NVD-CWE-noinfo	Primary	nvd@nist.gov
CWE-284	Secondary	psirt@nvidia.com

References

Hyperlink	Source	Resource
https://nvidia.custhelp.com/app/answers/detail/a_id/5353	psirt@nvidia.com	Patch Vendor Advisory
https://security.gentoo.org/glsa/202310-02	psirt@nvidia.com	Third Party Advisory

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History