CVE-2022-28186 NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where the product receives input or data, but does not validate or inc...
MediumCVSS 6.1
EPSS 0.27%
- Published
- Updated
- Exploit status
- No public exploit known
Description
NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where the product receives input or data, but does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly, which may lead to denial of service or data tampering.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| NVIDIA GPU Display Driver | = All GPU Driver versions for Windows | No fix listed |
| ubuntu/nvidia-graphics-drivers-430(Ubuntu:22.04) | All versions | No fix listed |
| ubuntu/nvidia-graphics-drivers-440(Ubuntu:22.04) | All versions | No fix listed |
| ubuntu/nvidia-graphics-drivers-455(Ubuntu:22.04) | All versions | No fix listed |
| NVIDIA gpu display driver | All versions | No fix listed |
| NVIDIA virtual gpu | >= 11.0, < 11.8 | 11.8 |
| NVIDIA virtual gpu | >= 13.0, < 13.3 | 13.3 |
| NVIDIA virtual gpu | = 14.0 | No fix listed |
References
- nvidia.custhelp.com patch vendor-advisory
- Ubuntu CVE tracker vendor-advisory
- www.cve.org