Skip to content
OpenAdvisories
Medium · 4.1 CVE-2022-28192 EUVD-2022-32646GHSA-x88c-8rhx-h8cw

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (nvidia.ko), where it may lead to a use-after-free, which in turn …

Published May 17, 2022 · Updated Aug 3, 2024 · Assigned by nvidia

Vendor: NVIDIA Product: NVIDIA Virtual GPU Software and NVIDIA Cloud Gaming Package: nvidia-graphics-drivers Package: nvidia-graphics-drivers-304 Package: nvidia-graphics-drivers-340 Package: nvidia-graphics-drivers-384 Package: nvidia-graphics-drivers-390 Package: nvidia-graphics-drivers-418-server Package: nvidia-graphics-drivers-430 Package: nvidia-graphics-drivers-435 Package: nvidia-graphics-drivers-440 Package: nvidia-graphics-drivers-440-server Package: nvidia-graphics-drivers-450 Package: nvidia-graphics-drivers-450-server Package: nvidia-graphics-drivers-455 Package: nvidia-graphics-drivers-460 Package: nvidia-graphics-drivers-460-server Package: nvidia-graphics-drivers-470 Package: nvidia-graphics-drivers-470-server Package: nvidia-graphics-drivers-510 Package: nvidia-graphics-drivers-510-server Package: nvidia-graphics-drivers-tesla-470 Ecosystem: Debian Ecosystem: Ubuntu

Description

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (nvidia.ko), where it may lead to a use-after-free, which in turn may cause denial of service. This attack is complex to carry out because the attacker needs to have control over freeing some host side resources out of sequence, which requires elevated privileges.

Affected products

VendorProductAffectedFixed
NVIDIA NVIDIA Virtual GPU Software and NVIDIA Cloud Gaming vGPU version 14.x (prior to 14.1), version 13.x (prior to 13.3) and version 11.x (prior 11.8). —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 nvidia-graphics-drivers 470.129.06-1 —
Debian 13 nvidia-graphics-drivers 470.129.06-1 —
Debian 12 nvidia-graphics-drivers +1 470.129.06-1 —

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 22.04 LTS nvidia-graphics-drivers-390 390.151-0ubuntu0.22.04.1 —
Ubuntu 22.04 LTS nvidia-graphics-drivers-430 +5 No fix yet —
Ubuntu 22.04 LTS nvidia-graphics-drivers-450-server 450.191.01-0ubuntu0.22.04.1 —
Ubuntu 22.04 LTS nvidia-graphics-drivers-470 +1 470.129.06-0ubuntu0.22.04.1 —
Ubuntu 22.04 LTS nvidia-graphics-drivers-510 +1 510.73.05-0ubuntu0.22.04.1 —
Ubuntu 20.04 LTS nvidia-graphics-drivers-340 +9 No fix yet —
Ubuntu 20.04 LTS nvidia-graphics-drivers-390 390.151-0ubuntu0.20.04.1 —
Ubuntu 20.04 LTS nvidia-graphics-drivers-450-server 450.191.01-0ubuntu0.20.04.1 —
Ubuntu 20.04 LTS nvidia-graphics-drivers-470 +1 470.129.06-0ubuntu0.20.04.1 —
Ubuntu 20.04 LTS nvidia-graphics-drivers-510 +1 510.73.05-0ubuntu0.20.04.1 —
Ubuntu 18.04 LTS nvidia-graphics-drivers-340 +9 No fix yet —
Ubuntu 18.04 LTS nvidia-graphics-drivers-390 390.151-0ubuntu0.18.04.1 —
Ubuntu 18.04 LTS nvidia-graphics-drivers-450-server 450.191.01-0ubuntu0.18.04.1 —
Ubuntu 18.04 LTS nvidia-graphics-drivers-470 +1 470.129.06-0ubuntu0.18.04.1 —
Ubuntu 18.04 LTS nvidia-graphics-drivers-510 +1 510.73.05-0ubuntu0.18.04.1 —
Ubuntu 16.04 LTS nvidia-graphics-drivers-304 +2 No fix yet —

Advisories 1

References