CVE-2022-31607

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko), where a local user with basic capabilities can cause improper input validation, which may lead to denial of service, escalation of privileges, data tampering, and limited information disclosure.
References
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:linux:*:*
cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:linux:*:*
cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:linux:*:*
cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:linux:*:*
cpe:2.3:h:nvidia:geforce:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:a:nvidia:cloud_gaming_guest:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
OR cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:linux:*:*
cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:linux:*:*
cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:linux:*:*
cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:linux:*:*
cpe:2.3:a:nvidia:rtx:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
OR cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:linux:*:*
cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:linux:*:*
cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:linux:*:*
cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:linux:*:*
cpe:2.3:h:nvidia:tesla:-:*:*:*:*:*:*:*

History

15 Oct 2023, 02:00

Type Values Removed Values Added
CWE CWE-20 NVD-CWE-noinfo
References (GENTOO) https://security.gentoo.org/glsa/202310-02 - (GENTOO) https://security.gentoo.org/glsa/202310-02 - Third Party Advisory

03 Oct 2023, 15:15

Type Values Removed Values Added
References
  • (GENTOO) https://security.gentoo.org/glsa/202310-02 -

29 Nov 2022, 15:42

Type Values Removed Values Added
CPE cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
cpe:2.3:a:nvidia:rtx:-:*:*:*:*:*:*:*
cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:linux:*:*
cpe:2.3:h:nvidia:geforce:-:*:*:*:*:*:*:*
cpe:2.3:a:nvidia:cloud_gaming_guest:*:*:*:*:*:*:*:*
cpe:2.3:h:nvidia:tesla:-:*:*:*:*:*:*:*
References (MISC) https://nvidia.custhelp.com/app/answers/detail/a_id/5383 - (MISC) https://nvidia.custhelp.com/app/answers/detail/a_id/5383 - Patch, Vendor Advisory
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 7.8
CWE CWE-20
First Time Nvidia
Linux
Linux linux Kernel
Nvidia cloud Gaming Guest
Nvidia tesla
Nvidia gpu Display Driver
Nvidia geforce
Nvidia rtx

19 Nov 2022, 00:15

Type Values Removed Values Added
New CVE

Information

Published : 2022-11-19 00:15

Updated : 2023-12-10 14:48


NVD link : CVE-2022-31607

Mitre link : CVE-2022-31607

CVE.ORG link : CVE-2022-31607


JSON object : View

Products Affected

nvidia

  • tesla
  • cloud_gaming_guest
  • gpu_display_driver
  • rtx
  • geforce

linux

  • linux_kernel
CWE
NVD-CWE-noinfo CWE-20

Improper Input Validation