Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2022-21814


NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel driver package, where improper handling of insufficient permissions or privileges may allow an unprivileged local user limited write access to protected memory, which can lead to denial of service.


Published

2022-02-07T20:15:07.830

Last Modified

2024-11-21T06:45:29.227

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 6.1 (MEDIUM)

CVSSv2 Vector

AV:L/AC:L/Au:N/C:N/I:P/A:P

  • Access Vector: LOCAL
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: NONE
  • Integrity Impact: PARTIAL
  • Availability Impact: PARTIAL
Exploitability Score

3.9

Impact Score

4.9

Weaknesses
  • Type: Secondary
    CWE-280
  • Type: Primary
    CWE-755

Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application nvidia geforce - Yes
Application nvidia gpu_display_driver - Yes
Application nvidia nvs - Yes
Application nvidia quadro - Yes
Application nvidia rtx - Yes
Application nvidia tesla - Yes
Application linux linux_kernel - No

References