CVE-2022-28185: 
Linux Debian vulnerability analysis and mitigation

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability (CVE-2022-28185) in the ECC layer, discovered and disclosed in May 2022. This vulnerability affects multiple NVIDIA driver branches including R510, R470, R450, and R390, where an unprivileged regular user can cause an out-of-bounds write (NVIDIA Security).

The vulnerability has been assigned a CVSS v3.1 base score of 6.8 (AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H), indicating a high severity issue. The vulnerability exists in the ECC layer of the GPU Display Driver, where improper bounds checking can lead to out-of-bounds write operations (NVIDIA Security).

If exploited, this vulnerability may lead to denial of service and data tampering. The local attack vector means the attacker needs local system access to exploit the vulnerability (NVIDIA Security).

NVIDIA has released security updates across multiple driver branches to address this vulnerability. For Windows systems, updates are available in versions 512.77 (R510), 473.47 (R470), and 453.51 (R450). For Linux systems, the fixed versions include 510.73.05 (R510), 470.129.06 (R470), 450.191.01 (R450), and 390.151 (R390) (NVIDIA Security).