CVE-2022-31609: Improper Authorization

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager vGPU plugin, where it allows the guest VM to allocate resources for which the guest is not authorized. This vulnerability may lead to loss of data integrity and confidentiality, denial of service, or information disclosure...

PT-2022-20873 · Nvidia · Nvidia Vgpu

Name of the Vulnerable Software and Affected Versions: NVIDIA vGPU software affected versions not specified Description: The issue is related to a null pointer dereference in the Virtual GPU Manager vGPU plugin of the NVIDIA vGPU software, which may lead to denial of service. Recommendations: At...

CVE-2022-31614: Double Free

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager vGPU plugin where it may double-free some resources. An attacker may exploit this vulnerability with other vulnerabilities to cause denial of service, code execution, and information disclosure...

NVIDIA Virtual GPU Manager Multiple Vulnerabilities (August 2022)

The NVIDIA Virtual GPU Manager software on the remote host is missing a security update. It is, therefore, affected by multiple vulnerabilities, including the following: - A vulnerability that allows the guest VM to allocate resources for which the guest is not authorized, leading to a loss of...

NVIDIA Virtual GPU Manager Multiple Vulnerabilities (May 2022)

The NVIDIA Virtual GPU Manager software on the remote host is missing a security update. It is, therefore, affected by multiple vulnerabilities, including the following: - NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager nvidia.ko, where uncontrolled resource consumption c...

Vulnerability of the nvidia.ko module of the NVIDIA Virtual GPU Manager driver, which allows a hacker to cause a service failure.

The vulnerability of the nvidia.ko module of the NVIDIA Virtual GPU Manager driver relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure...

Mageia: Security Advisory (MGASA-2022-0198)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MGASA-2022-0198 Updated nvidia-current packages fix security vulnerabilities

Updated nvidia-current packages fix security vulnerabilities: NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer, where an unprivileged regular user on the network can cause an out-of-bounds write through a specially crafted shader, which may lead to code execution, denia...

PT-2022-37641

Name of the Vulnerable Software and Affected Versions: NVIDIA GPU Display Driver versions prior to the fixed version NVIDIA vGPU software versions prior to the fixed version Description: The NVIDIA GPU Display Driver contains vulnerabilities in the kernel mode layer, where an unprivileged regular...

PT-2022-37551

Name of the Vulnerable Software and Affected Versions: NVIDIA GPU Display Driver affected versions not specified NVIDIA vGPU software affected versions not specified Description: The NVIDIA GPU Display Driver contains vulnerabilities in the kernel mode layer, allowing an unprivileged regular user...

PT-2022-37550

Name of the Vulnerable Software and Affected Versions: NVIDIA GPU Display Driver versions affected versions not specified Description: The NVIDIA GPU Display Driver contains multiple vulnerabilities, including issues in the kernel mode layer and the ECC layer. An unprivileged regular user on the...

DEBIAN-CVE-2022-28191

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager nvidia.ko, where uncontrolled resource consumption can be triggered by an unprivileged regular user, which may lead to denial of service...

CVE-2022-28192

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager nvidia.ko, where it may lead to a use-after-free, which in turn may cause denial of service. This attack is complex to carry out because the attacker needs to have control over freeing some host side resources out of sequenc...

CVE-2022-28192

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager nvidia.ko, where it may lead to a use-after-free, which in turn may cause denial of service. This attack is complex to carry out because the attacker needs to have control over freeing some host side resources out of sequenc...

CVE-2022-28191

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager nvidia.ko, where uncontrolled resource consumption can be triggered by an unprivileged regular user, which may lead to denial of service...

CVE-2022-28191

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager nvidia.ko, where uncontrolled resource consumption can be triggered by an unprivileged regular user, which may lead to denial of service...

UBUNTU-CVE-2022-28191

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager nvidia.ko, where uncontrolled resource consumption can be triggered by an unprivileged regular user, which may lead to denial of service...

UBUNTU-CVE-2022-28192

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager nvidia.ko, where it may lead to a use-after-free, which in turn may cause denial of service. This attack is complex to carry out because the attacker needs to have control over freeing some host side resources out of sequenc...

CVE-2022-28192

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager nvidia.ko, where it may lead to a use-after-free, which in turn may cause denial of service. This attack is complex to carry out because the attacker needs to have control over freeing some host side resources out of sequenc...

CVE-2022-28192

CVE-2022-28192 affects NVIDIA vGPU software (Virtual GPU Manager, nvidia.ko). The vulnerability is a use-after-free in the driver, where an attacker who can release host resources out of sequence and has elevated privileges may cause a denial of service. Exploitation details are not provided beyo...