CVE-2022-31609: nvidia nvidia virtual gpu software and nvidia cloud gaming Improper Authorization
Vulnerability summary
CVE-2022-31609 is a high (CVSS 7.8) Improper Authorization vulnerability in nvidia nvidia virtual gpu software and nvidia cloud gaming. EPSS estimates a 0.22% chance of exploitation in the next 30 days, higher than 11.7% of scored vulnerabilities.
Timeline
- 05-08-2022PublishedVulnerability first disclosed.
- 02-06-2026Last modifiedVulnerability information updated.
Description
NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where it allows the guest VM to allocate resources for which the guest is not authorized. This vulnerability may lead to loss of data integrity and confidentiality, denial of service, or information disclosure.
CVSS metrics
3 scores · 3 sources · 1 version- OSV · UbuntuEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- NVDNIST7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
0.22%
Chance of exploitation in the next 30 days
Percentile
12%
Versus all other CVEs
30-day change
0.00 pp
From 0.22% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Ubuntu12 products
- nvidia-graphics-drivers-304All versions (No fix recorded)
- nvidia-graphics-drivers-340All versions (No fix recorded)
- nvidia-graphics-drivers-384All versions (No fix recorded)
- nvidia-graphics-drivers-418-serverAll versions (No fix recorded)
- nvidia-graphics-drivers-430All versions (No fix recorded)
Nvidia2 products
- nvidia virtual gpu software and nvidia cloud gamingvGPU version 14.x (prior to 14.2), version 13.x (prior to 13.4) and version 11.x (prior 11.9).
- virtual_gpu≥ 11.0, < 11.8 | ≥ 13.0, < 13.3 | 14.0 | 14.1
2 vendors · 14 products