
Cloud Vulnerability DB
A community-led vulnerabilities database
CVE-2022-21813 is a vulnerability discovered in NVIDIA GPU Display Driver for Linux, specifically affecting the kernel driver. The vulnerability was disclosed on February 1, 2022. It impacts various NVIDIA products including GeForce, NVIDIA RTX/Quadro, NVS, and Tesla series running on Linux operating systems (NVD, NVIDIA Advisory).
The vulnerability stems from improper handling of insufficient permissions or privileges in the kernel driver. It has been assigned a CVSS v3.1 base score of 6.1 (Medium) with the vector string CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H. The vulnerability is classified under CWE-755 (Improper Handling of Exceptional Conditions) and CWE-284 (Improper Access Control) (NVD).
When exploited, this vulnerability allows an unprivileged local user to gain limited write access to protected memory, which can lead to denial of service conditions in the affected systems (NVIDIA Advisory).
NVIDIA has released security updates to address this vulnerability. For the R510 driver branch, users should update to version 510.47.03 or later. For the R470 branch, the fix is available in version 470.103.01 or later. No alternative workarounds are available, and users are strongly recommended to update to the patched versions (NVIDIA Advisory).
Source: This report was generated using AI
Free Vulnerability Assessment
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Get a personalized demo
"Best User Experience I have ever seen, provides full visibility to cloud workloads."
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
"We know that if Wiz identifies something as critical, it actually is."