« Volver al listado

CVE-2022-21815

Estado: ModificadaMedia (5.5)—

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for private IOCTLs where a NULL pointer dereference in the kernel, created within user mode code, may lead to a denial of service in the form of a system crash.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (9)

Nvidia — Cloud Gaming GuestNvidia — GeforceNvidia — GPU Display DriverNvidia — NVSNvidia — QuadroNvidia — RTXNvidia — StudioNvidia — TeslaNvidia — Virtual GPU

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2022-21815",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4.9,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:N/C:N/I:N/A:C",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 6.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "psirt@nvidia.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 5.5,
          "attackVector": "LOCAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 1.8
      },
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 5.5,
          "attackVector": "LOCAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 1.8
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@nvidia.com",
      "affectedData": [
        {
          "vendor": "NVIDIA",
          "product": "NVIDIA GPU Display Driver",
          "versions": [
            {
              "status": "affected",
              "version": "All GPU Driver versions for Windows"
            }
          ]
        }
      ]
    }
  ],
  "published": "2022-02-07T20:15:07.887",
  "references": [
    {
      "url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5312",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@nvidia.com"
    },
    {
      "url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5312",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "psirt@nvidia.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-476"
        }
      ]
    },
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-476"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for private IOCTLs where a NULL pointer dereference in the kernel, created within user mode code, may lead to a denial of service in the form of a system crash."
    },
    {
      "lang": "es",
      "value": "NVIDIA GPU Display Driver para Windows contiene una vulnerabilidad en el manejador de la capa del modo kernel (nvlddmkm.sys) para las IOCTL privadas en la que una desreferencia del puntero NULL en el kernel, creada dentro del código del modo de usuario, puede conllevar a una denegación de servicio en forma de bloqueo del sistema"
    }
  ],
  "lastModified": "2026-06-17T04:27:02.250",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:nvidia:cloud_gaming_guest:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F3BF125D-2BDD-4DDB-B8A6-5D28E64157E5"
            },
            {
              "criteria": "cpe:2.3:a:nvidia:geforce:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "24DE5CC2-3787-4605-8EFA-77590E36E960"
            },
            {
              "criteria": "cpe:2.3:a:nvidia:gpu_display_driver:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C37AC285-221B-474F-8B3F-9DD7C586EB43"
            },
            {
              "criteria": "cpe:2.3:a:nvidia:nvs:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "333646B0-AAD5-4DD7-8940-6334D0A8E77C"
            },
            {
              "criteria": "cpe:2.3:a:nvidia:quadro:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A1DB9FB5-E115-4E96-98F8-3FAFAC120E98"
            },
            {
              "criteria": "cpe:2.3:a:nvidia:rtx:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "08C63EA1-8719-4F5C-922A-C77ED4CEF7C7"
            },
            {
              "criteria": "cpe:2.3:a:nvidia:studio:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C1ED5DE2-7677-4F38-8177-3BF0B3D03A09"
            },
            {
              "criteria": "cpe:2.3:a:nvidia:tesla:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D135086F-CA5E-4242-ACBA-C3AC82F4BE03"
            },
            {
              "criteria": "cpe:2.3:a:nvidia:virtual_gpu:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A3CCCEEC-CB0F-412F-9DE5-CD86E2AF6B2A"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "psirt@nvidia.com"
}