CVE-2022-31607
Estado: ModificadaAlta (7.8)—
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko), where a local user with basic capabilities can cause improper input validation, which may lead to denial of service, escalation of privileges, data tampering, and limited information disclosure.
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Puntuación base: 7.8
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.25%
- Percentil entre todas las CVEs puntuadas: 15
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (2)
CWE
- CWE-20
- NVD-CWE-noinfo
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2022-31607",
"cveTags": [],
"metrics": {
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2022-31607",
"role": "CISA Coordinator",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "partial"
}
],
"version": "2.0.3",
"timestamp": "2025-04-29T14:34:10.995607Z"
}
}
],
"cvssMetricV31": [
{
"type": "Secondary",
"source": "psirt@nvidia.com",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 7.8,
"attackVector": "LOCAL",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "LOW",
"confidentialityImpact": "HIGH"
},
"impactScore": 5.9,
"exploitabilityScore": 1.8
},
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 7.8,
"attackVector": "LOCAL",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "LOW",
"confidentialityImpact": "HIGH"
},
"impactScore": 5.9,
"exploitabilityScore": 1.8
}
]
},
"affected": [
{
"source": "psirt@nvidia.com",
"affectedData": [
{
"vendor": "NVIDIA",
"product": "NVIDIA Cloud Gaming (guest driver), NVIDIA Cloud Gaming (Virtual GPU Manager)",
"versions": [
{
"status": "affected",
"version": "All versions prior to the August 2022 release"
}
]
}
]
}
],
"published": "2022-11-19T00:15:23.190",
"references": [
{
"url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5383",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "psirt@nvidia.com"
},
{
"url": "https://security.gentoo.org/glsa/202310-02",
"tags": [
"Third Party Advisory"
],
"source": "psirt@nvidia.com"
},
{
"url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5383",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://security.gentoo.org/glsa/202310-02",
"tags": [
"Third Party Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Secondary",
"source": "psirt@nvidia.com",
"description": [
{
"lang": "en",
"value": "CWE-20"
}
]
},
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko), where a local user with basic capabilities can cause improper input validation, which may lead to denial of service, escalation of privileges, data tampering, and limited information disclosure."
},
{
"lang": "es",
"value": "NVIDIA GPU Display Driver para Linux contiene una vulnerabilidad en la capa del modo kernel (nvidia.ko), donde un usuario local con capacidades básicas puede provocar una validación de entrada incorrecta, lo que puede provocar Denegación de Servicio (DoS), escalada de privilegios, manipulación de datos y acceso limitado divulgación de información."
}
],
"lastModified": "2026-06-17T04:45:46.520",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:linux:*:*",
"vulnerable": true,
"matchCriteriaId": "C1777FEA-7B6B-4629-BFFD-E45492C96D18",
"versionEndExcluding": "390.154",
"versionStartIncluding": "390"
},
{
"criteria": "cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:linux:*:*",
"vulnerable": true,
"matchCriteriaId": "677332FE-B818-48A9-82EE-474703AE1D81",
"versionEndExcluding": "470.141.03",
"versionStartIncluding": "470"
},
{
"criteria": "cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:linux:*:*",
"vulnerable": true,
"matchCriteriaId": "C8E67FE7-2A7D-4FC0-A623-A981FD5776AB",
"versionEndExcluding": "510.85.02",
"versionStartIncluding": "510"
},
{
"criteria": "cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:linux:*:*",
"vulnerable": true,
"matchCriteriaId": "8603E59F-1C4A-4A15-B28B-1665D5AE5B58",
"versionEndExcluding": "515.65.01",
"versionStartIncluding": "515"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:nvidia:geforce:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "6B30520A-D378-4CC8-812D-3B443740D6E3"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:nvidia:cloud_gaming_guest:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BF656F94-6425-44EC-BCDA-6E9F9BC7546B",
"versionEndExcluding": "515.65.01"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:linux:*:*",
"vulnerable": true,
"matchCriteriaId": "C1777FEA-7B6B-4629-BFFD-E45492C96D18",
"versionEndExcluding": "390.154",
"versionStartIncluding": "390"
},
{
"criteria": "cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:linux:*:*",
"vulnerable": true,
"matchCriteriaId": "677332FE-B818-48A9-82EE-474703AE1D81",
"versionEndExcluding": "470.141.03",
"versionStartIncluding": "470"
},
{
"criteria": "cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:linux:*:*",
"vulnerable": true,
"matchCriteriaId": "C8E67FE7-2A7D-4FC0-A623-A981FD5776AB",
"versionEndExcluding": "510.85.02",
"versionStartIncluding": "510"
},
{
"criteria": "cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:linux:*:*",
"vulnerable": true,
"matchCriteriaId": "8603E59F-1C4A-4A15-B28B-1665D5AE5B58",
"versionEndExcluding": "515.65.01",
"versionStartIncluding": "515"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:nvidia:rtx:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "08C63EA1-8719-4F5C-922A-C77ED4CEF7C7"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:linux:*:*",
"vulnerable": true,
"matchCriteriaId": "6A5C4A60-A16B-4BDA-BFDF-482A254F237F",
"versionEndExcluding": "450.203.03",
"versionStartIncluding": "450"
},
{
"criteria": "cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:linux:*:*",
"vulnerable": true,
"matchCriteriaId": "677332FE-B818-48A9-82EE-474703AE1D81",
"versionEndExcluding": "470.141.03",
"versionStartIncluding": "470"
},
{
"criteria": "cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:linux:*:*",
"vulnerable": true,
"matchCriteriaId": "C8E67FE7-2A7D-4FC0-A623-A981FD5776AB",
"versionEndExcluding": "510.85.02",
"versionStartIncluding": "510"
},
{
"criteria": "cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:linux:*:*",
"vulnerable": true,
"matchCriteriaId": "8603E59F-1C4A-4A15-B28B-1665D5AE5B58",
"versionEndExcluding": "515.65.01",
"versionStartIncluding": "515"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:nvidia:tesla:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "75C6DE26-88F2-428E-B761-754BD027E015"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "psirt@nvidia.com"
}