Vulnerability · Published Feb 7, 2022 · Assigned by nvidia
CVE-2022-21816
Medium 5.5
In plain English
A medium-severity improper access control in NVIDIA Virtual GPU Software and NVIDIA Cloud Gaming from NVIDIA. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 9% of all known vulnerabilities).
Severity (CVSS 3.1)5.5Medium
Exploit odds (30 days)0.2%top 91.3% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (nvidia.ko), where a user in the guest OS can cause a GPU interrupt storm on the hypervisor host, leading to a denial of service.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| NVIDIA | NVIDIA Virtual GPU Software and NVIDIA Cloud Gaming | vGPU version 13.x (prior to 13.2), version 11.x (prior to 11.7) and version 8.x (prior 8.10). |
Weakness: CWE-284 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
References
- https://nvidia.custhelp.com/app/answers/detail/a_id/5312 x_refsource_MISC