Skip to content
OpenAdvisories
Medium · 6.1 CVE-2022-28186 EUVD-2022-32640GHSA-rf6g-3x67-92j3

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where the…

Published May 17, 2022 · Updated Aug 3, 2024 · Assigned by nvidia

Vendor: NVIDIA Product: NVIDIA GPU Display Driver Package: nvidia-graphics-drivers-304 Package: nvidia-graphics-drivers-340 Package: nvidia-graphics-drivers-384 Package: nvidia-graphics-drivers-430 Package: nvidia-graphics-drivers-435 Package: nvidia-graphics-drivers-440 Package: nvidia-graphics-drivers-440-server Package: nvidia-graphics-drivers-455 Ecosystem: Ubuntu

Description

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where the product receives input or data, but does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly, which may lead to denial of service or data tampering.

Affected products

VendorProductAffectedFixed
NVIDIA NVIDIA GPU Display Driver All GPU Driver versions for Windows —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 22.04 LTS nvidia-graphics-drivers-430 +2 No fix yet —
Ubuntu 20.04 LTS nvidia-graphics-drivers-340 +5 No fix yet —
Ubuntu 18.04 LTS nvidia-graphics-drivers-340 +5 No fix yet —
Ubuntu 16.04 LTS nvidia-graphics-drivers-304 +2 No fix yet —

Advisories 1

References