CVE-2022-21813
Estado: ModificadaMedia (6.1)—
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel driver, where improper handling of insufficient permissions or privileges may allow an unprivileged local user limited write access to protected memory, which can lead to denial of service.
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H
- Puntuación base: 6.1
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.23%
- Percentil entre todas las CVEs puntuadas: 13
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (8)
CWE
- CWE-284
- CWE-755
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2022-21813",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 3.6,
"accessVector": "LOCAL",
"vectorString": "AV:L/AC:L/Au:N/C:N/I:P/A:P",
"authentication": "NONE",
"integrityImpact": "PARTIAL",
"accessComplexity": "LOW",
"availabilityImpact": "PARTIAL",
"confidentialityImpact": "NONE"
},
"acInsufInfo": false,
"impactScore": 4.9,
"baseSeverity": "LOW",
"obtainAllPrivilege": false,
"exploitabilityScore": 3.9,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
],
"cvssMetricV31": [
{
"type": "Secondary",
"source": "psirt@nvidia.com",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 6.1,
"attackVector": "LOCAL",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
"integrityImpact": "LOW",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "LOW",
"confidentialityImpact": "NONE"
},
"impactScore": 4.2,
"exploitabilityScore": 1.8
},
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 6.1,
"attackVector": "LOCAL",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
"integrityImpact": "LOW",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "LOW",
"confidentialityImpact": "NONE"
},
"impactScore": 4.2,
"exploitabilityScore": 1.8
}
]
},
"affected": [
{
"source": "psirt@nvidia.com",
"affectedData": [
{
"vendor": "NVIDIA",
"product": "NVIDIA GPU Display Driver",
"versions": [
{
"status": "affected",
"version": "All GPU Driver versions for Linux"
}
]
}
]
}
],
"published": "2022-02-07T20:15:07.773",
"references": [
{
"url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5312",
"tags": [
"Vendor Advisory"
],
"source": "psirt@nvidia.com"
},
{
"url": "https://security.gentoo.org/glsa/202310-02",
"tags": [
"Third Party Advisory"
],
"source": "psirt@nvidia.com"
},
{
"url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5312",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://security.gentoo.org/glsa/202310-02",
"tags": [
"Third Party Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Secondary",
"source": "psirt@nvidia.com",
"description": [
{
"lang": "en",
"value": "CWE-284"
}
]
},
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-755"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel driver, where improper handling of insufficient permissions or privileges may allow an unprivileged local user limited write access to protected memory, which can lead to denial of service."
},
{
"lang": "es",
"value": "NVIDIA GPU Display Driver para Linux contiene una vulnerabilidad en el controlador del kernel, donde el manejo inapropiado de permisos o privilegios insuficientes puede permitir a un usuario local no privilegiado un acceso de escritura limitado a la memoria protegida, lo que puede conllevar una denegación de servicio"
}
],
"lastModified": "2026-06-17T04:27:02.027",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:nvidia:cloud_gaming_guest:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F3BF125D-2BDD-4DDB-B8A6-5D28E64157E5"
},
{
"criteria": "cpe:2.3:a:nvidia:geforce:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "24DE5CC2-3787-4605-8EFA-77590E36E960"
},
{
"criteria": "cpe:2.3:a:nvidia:gpu_display_driver:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C37AC285-221B-474F-8B3F-9DD7C586EB43"
},
{
"criteria": "cpe:2.3:a:nvidia:nvs:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "333646B0-AAD5-4DD7-8940-6334D0A8E77C"
},
{
"criteria": "cpe:2.3:a:nvidia:quadro:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A1DB9FB5-E115-4E96-98F8-3FAFAC120E98"
},
{
"criteria": "cpe:2.3:a:nvidia:rtx:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "08C63EA1-8719-4F5C-922A-C77ED4CEF7C7"
},
{
"criteria": "cpe:2.3:a:nvidia:tesla:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D135086F-CA5E-4242-ACBA-C3AC82F4BE03"
},
{
"criteria": "cpe:2.3:a:nvidia:virtual_gpu:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A3CCCEEC-CB0F-412F-9DE5-CD86E2AF6B2A"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "psirt@nvidia.com"
}