p PatchFirst

PatchFirst · Latest vulnerabilities

nvidia-graphics-drivers vulnerabilities · Page 8

Vulnerabilities published for nvidia-graphics-drivers in the last 30 days: 81. Listed in the KEV catalogue: 0.

Filter vulnerabilities
Clear filters

Vulnerabilities: 198

  1. CVE-2022-31608

    High · CVSS 7.8EPSS 0.28%Fix available

    CVE-2022-31608

    NVIDIA GPU Display Driver for Linux contains a vulnerability in an optional D-Bus configuration file, where a local user with basic capabilities can impact protected D-Bus endpoints, which may lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

    • Update to 470.141.03-1
    Published Updated
  2. CVE-2022-31607

    High · CVSS 7.8EPSS 0.26%Fix available

    CVE-2022-31607

    NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko), where a local user with basic capabilities can cause improper input validation, which may lead to denial of service, escalation of privileges, data tampering, and limited information disclosure.

    • Update to 470.141.03-1
    Published Updated
  3. CVE-2022-28192

    Medium · CVSS 4.1EPSS 0.23%Fix available

    CVE-2022-28192

    NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (nvidia.ko), where it may lead to a use-after-free, which in turn may cause denial of service. This attack is complex to carry out because the attacker needs to have control over freeing some host side resources out of sequence, which requires elevated privileges.

    • Update to 470.129.06-1
    Published Updated
  4. CVE-2022-28184

    High · CVSS 7.1EPSS 0.3%Fix available

    CVE-2022-28184

    NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where an unprivileged regular user can access administrator- privileged registers, which may lead to denial of service, information disclosure, and data tampering.

    • Update to 470.129.06-1
    Published Updated
  5. CVE-2022-28181

    High · CVSS 8.5EPSS 1.13%Fix available

    CVE-2022-28181

    NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where an unprivileged regular user on the network can cause an out-of-bounds write through a specially crafted shader, which may lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering. The scope of the impact may extend to other components.

    • Update to 470.129.06-1
    Published Updated
  6. CVE-2022-21814

    Medium · CVSS 6.1EPSS 0.23%Fix available

    CVE-2022-21814

    NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel driver package, where improper handling of insufficient permissions or privileges may allow an unprivileged local user limited write access to protected memory, which can lead to denial of service.

    • Update to 470.103.01-1
    Published Updated
  7. CVE-2022-21813

    Medium · CVSS 6.1EPSS 0.23%Fix available

    CVE-2022-21813

    NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel driver, where improper handling of insufficient permissions or privileges may allow an unprivileged local user limited write access to protected memory, which can lead to denial of service.

    • Update to 470.103.01-1
    Published Updated
  8. CVE-2021-1093

    Medium · CVSS 6.2EPSS 0.35%Fix available

    CVE-2021-1093

    NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in firmware where the driver contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary, and may lead to denial of service or system crash.

    • Update to 460.91.03-1
    Published Updated
  9. CVE-2021-1056

    High · CVSS 7.1EPSS 1.71%Fix available

    CVE-2021-1056

    NVIDIA GPU Display Driver for Linux, all versions, contains a vulnerability in the kernel mode layer (nvidia.ko) in which it does not completely honor operating system file system permissions to provide GPU device-level isolation, which may lead to denial of service or information disclosure.

    • Update to 460.32.03-1
    Published Updated

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →