Skip to content
Fencer Intel
high 8.5

CVE-2022-28181 json

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where an unprivileged regular user on th…

published 4y ago modified 4mo ago also EUVD-2022-32635

cvss
8.5
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
1.1%
EPSS 1.1% chance of exploitation in 30 days, percentile 66%
public exploits
0
none known

Summary

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where an unprivileged regular user on the network can cause an out-of-bounds write through a specially crafted shader, which may lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering. The scope of the impact may extend to other components.

Patch / fix

  • nvidia virtual_gpu 11.8, 13.3
  • nvidia-graphics-drivers Debian 14, Debian 13, Debian 12 470.129.06-1
  • nvidia-graphics-drivers-tesla-470 Debian 12 470.129.06-1

debian advisories DEBIAN-CVE-2022-28181

  • nvidia-graphics-drivers-390 Ubuntu 18.04 LTS 390.151-0ubuntu0.18.04.1
  • nvidia-graphics-drivers-390 Ubuntu 20.04 LTS 390.151-0ubuntu0.20.04.1
  • nvidia-graphics-drivers-390 Ubuntu 22.04 LTS 390.151-0ubuntu0.22.04.1
  • nvidia-graphics-drivers-470 Ubuntu 18.04 LTS 470.129.06-0ubuntu0.18.04.1
  • nvidia-graphics-drivers-470 Ubuntu 20.04 LTS 470.129.06-0ubuntu0.20.04.1
  • nvidia-graphics-drivers-470 Ubuntu 22.04 LTS 470.129.06-0ubuntu0.22.04.1
  • nvidia-graphics-drivers-510 Ubuntu 18.04 LTS 510.73.05-0ubuntu0.18.04.1
  • nvidia-graphics-drivers-510 Ubuntu 20.04 LTS 510.73.05-0ubuntu0.20.04.1

ubuntu advisories UBUNTU-CVE-2022-28181

Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

  • nvidia-open Arch Linux 510.73.05-1
  • nvidia-open-dkms Arch Linux 510.73.05-1

arch linux advisories AVG-2735

Is CVE-2022-28181 in your stack? Fencer shows which of your repositories are affected as soon as an advisory lands, and opens the fix as a pull request.

Check with Fencer

Exploit prediction

1.13% chance of exploitation in the next 30 days, higher than 66% of all scored CVEs (FIRST EPSS, 2026-11-09).

CVSS scores

assigned by version score vector
CNA 3.1 8.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
NVD 3.1 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
NVD 2.0 6.9 AV:L/AC:M/Au:N/C:C/I:C/A:C

Affected products

  • NVIDIA NVIDIA GPU Display Driver

Classification

Weakness

References

Sources

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.