CVE-2022-31617

CVE-2022-31617 affects NVIDIA GPU Display Driver for Windows (nvlddmkm.sys) where a local user with basic privileges can trigger an out-of-bounds read in the kernel mode layer, potentially enabling code execution, DoS, privilege escalation, information disclosure, or data tampering. The consolida...

CVE-2022-41888 Unckecked rank size in `tf.image.generate_bounding_box_proposals` in Tensorflow

TensorFlow is an open source platform for machine learning. When running on GPU, tf.image.generateboundingboxproposals receives a scores input that must be of rank 4 but is not checked. We have patched the issue in GitHub commit cf35502463a88ca7185a99daa7031df60b3c1c98. The fix will be included i...

CVE-2022-31616

CVE-2022-31616 details (concrete): The vulnerability affects the NVIDIA GPU Display Driver for Windows, specifically the kernel-mode handler nvlddmkm.sys DxgkDdiEscape. A local user with basic privileges can trigger an out-of-bounds read, leading to either denial of service or information disclos...

CVE-2022-31615

CVE-2022-31615 affects NVIDIA GPU Display Driver for Linux where the kernel mode layer (nvidia.ko) contains a vulnerability allowing a local user with basic privileges to trigger a null-pointer dereference, potentially causing denial of service. The related Gentoo GLSA and Mageia advisories corro...

CVE-2022-41888

TensorFlow is an open source platform for machine learning. When running on GPU, tf.image.generateboundingboxproposals receives a scores input that must be of rank 4 but is not checked. We have patched the issue in GitHub commit cf35502463a88ca7185a99daa7031df60b3c1c98. The fix will be included i...

CVE-2022-34665

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a local user with basic capabilities can cause a null-pointer dereference, which may lead to denial of service...

CVE-2022-31613

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer, where any local user can cause a null-pointer dereference, which may lead to a kernel panic...

CVE-2022-31608

NVIDIA GPU Display Driver for Linux contains a vulnerability in an optional D-Bus configuration file, where a local user with basic capabilities can impact protected D-Bus endpoints, which may lead to code execution, denial of service, escalation of privileges, information disclosure, and data...

CVE-2022-31615

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where a local user with basic capabilities can cause a null-pointer dereference, which may lead to denial of service...

CVE-2022-31612

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape, where a local user with basic capabilities can cause an out-of-bounds read, which may lead to a system crash or a leak of internal kernel information...

CVE-2022-34665

CVE-2022-34665 affects the NVIDIA GPU Display Driver for Windows and Linux, with a vulnerability in the kernel mode layer that a local user with basic capabilities can trigger a null-pointer dereference, leading to a denial of service. The connected documents provide concrete technical context: k...

CVE-2022-31610

CVE-2022-31610 concerns the NVIDIA GPU Display Driver for Windows. The vulnerability resides in the kernel-mode layer (nvlddmkm.sys) and can be triggered by a local user with basic capabilities, causing an out-of-bounds write. This may lead to code execution, denial of service, privilege escalati...

CVE-2022-31608

NVIDIA GPU Display Driver for Linux contains a vulnerability in an optional D-Bus configuration file, where a local user with basic capabilities can impact protected D-Bus endpoints, which may lead to code execution, denial of service, escalation of privileges, information disclosure, and data...

CVE-2022-31615

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where a local user with basic capabilities can cause a null-pointer dereference, which may lead to denial of service...

CVE-2022-34665

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a local user with basic capabilities can cause a null-pointer dereference, which may lead to denial of service...

AlmaLinux 9 : qemu-kvm (ALSA-2022:5263)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2022:5263 advisory. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C...

kernel: drm/virtio: Ensure that objs is not NULL in virtio_gpu_array_put_free()

A flaw was found in the virtio-gpu module in the Linux kernel. If the initialization fails, for example, due to a fault injection, a missing check in the virtiogpuarrayputfree function can cause a NULL pointer dereference, resulting in a denial of service...

GSD-2022-1007233 gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()

gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611connectorinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.150 by commit...

GSD-2022-1007025 gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()

gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611connectorinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.75 by commit...

GSD-2022-1006751 gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()

gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611connectorinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...