Nvidia Virtual GPU Software And Nvidia Cloud Gaming vulnerabilities
6 vulnerabilities
Known vulnerabilities in Nvidia Virtual GPU Software And Nvidia Cloud Gaming, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2022-21816nvidiacloud_gaming_virtual_gpu+2
EPSS score0.19%
NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (nvidia.ko), where a user in the guest OS can cause a GPU interrupt storm on the hypervisor host, leading to a denial of service.CVE-2022-31609ubuntunvidia-graphics-drivers-304+13EPSS score0.22%
NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where it allows the guest VM to allocate resources for which the guest is not authorized. This vulnerability may lead to loss of data integrity and confidentiality, denial of service, or information disclosure.CVE-2022-31614ubuntunvidia-graphics-drivers-304+13EPSS score0.27%
NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin) where it may double-free some resources. An attacker may exploit this vulnerability with other vulnerabilities to cause denial of service, code execution, and information disclosure.CVE-2022-31618ubuntunvidia-graphics-drivers-304+13EPSS score0.18%
NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where it can dereference a null pointer, which may lead to denial of service.CVE-2022-28192debiannvidia-graphics-drivers+21EPSS score0.23%
NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (nvidia.ko), where it may lead to a use-after-free, which in turn may cause denial of service. This attack is complex to carry out because the attacker needs to have control over freeing some host side resources out of sequence, which requires elevated privileges.CVE-2022-28191debiannvidia-graphics-drivers+21EPSS score0.27%
NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (nvidia.ko), where uncontrolled resource consumption can be triggered by an unprivileged regular user, which may lead to denial of service.