« Volver al listado

CVE-2022-21813

Estado: ModificadaMedia (6.1)—

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel driver, where improper handling of insufficient permissions or privileges may allow an unprivileged local user limited write access to protected memory, which can lead to denial of service.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (8)

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2022-21813",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 3.6,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:N/C:N/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 4.9,
        "baseSeverity": "LOW",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "psirt@nvidia.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 6.1,
          "attackVector": "LOCAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
          "integrityImpact": "LOW",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 4.2,
        "exploitabilityScore": 1.8
      },
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 6.1,
          "attackVector": "LOCAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
          "integrityImpact": "LOW",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 4.2,
        "exploitabilityScore": 1.8
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@nvidia.com",
      "affectedData": [
        {
          "vendor": "NVIDIA",
          "product": "NVIDIA GPU Display Driver",
          "versions": [
            {
              "status": "affected",
              "version": "All GPU Driver versions for Linux"
            }
          ]
        }
      ]
    }
  ],
  "published": "2022-02-07T20:15:07.773",
  "references": [
    {
      "url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5312",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@nvidia.com"
    },
    {
      "url": "https://security.gentoo.org/glsa/202310-02",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "psirt@nvidia.com"
    },
    {
      "url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5312",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://security.gentoo.org/glsa/202310-02",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "psirt@nvidia.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-284"
        }
      ]
    },
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-755"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel driver, where improper handling of insufficient permissions or privileges may allow an unprivileged local user limited write access to protected memory, which can lead to denial of service."
    },
    {
      "lang": "es",
      "value": "NVIDIA GPU Display Driver para Linux contiene una vulnerabilidad en el controlador del kernel, donde el manejo inapropiado de permisos o privilegios insuficientes puede permitir a un usuario local no privilegiado un acceso de escritura limitado a la memoria protegida, lo que puede conllevar una denegación de servicio"
    }
  ],
  "lastModified": "2026-06-17T04:27:02.027",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:nvidia:cloud_gaming_guest:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F3BF125D-2BDD-4DDB-B8A6-5D28E64157E5"
            },
            {
              "criteria": "cpe:2.3:a:nvidia:geforce:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "24DE5CC2-3787-4605-8EFA-77590E36E960"
            },
            {
              "criteria": "cpe:2.3:a:nvidia:gpu_display_driver:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C37AC285-221B-474F-8B3F-9DD7C586EB43"
            },
            {
              "criteria": "cpe:2.3:a:nvidia:nvs:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "333646B0-AAD5-4DD7-8940-6334D0A8E77C"
            },
            {
              "criteria": "cpe:2.3:a:nvidia:quadro:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A1DB9FB5-E115-4E96-98F8-3FAFAC120E98"
            },
            {
              "criteria": "cpe:2.3:a:nvidia:rtx:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "08C63EA1-8719-4F5C-922A-C77ED4CEF7C7"
            },
            {
              "criteria": "cpe:2.3:a:nvidia:tesla:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D135086F-CA5E-4242-ACBA-C3AC82F4BE03"
            },
            {
              "criteria": "cpe:2.3:a:nvidia:virtual_gpu:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A3CCCEEC-CB0F-412F-9DE5-CD86E2AF6B2A"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "psirt@nvidia.com"
}