← Back

CVE-2022-31608

nvd nist
Published: Nov 19, 2022Modified: Jun 17, 2026

JSON object

Loading...
7.8
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: NVD

Description

NVIDIA GPU Display Driver for Linux contains a vulnerability in an optional D-Bus configuration file, where a local user with basic capabilities can impact protected D-Bus endpoints, which may lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

Affected (5)

Nvidia
1 product
Gpu Display Driver
Configuration A
1 platform
Running on/withPlatform Versions
Nvidia
Geforce
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Gpu Display Driver
From 390 to 390.154
Running on/withPlatform Versions
Nvidia
Rtx
All versions
Configuration C
4 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Nvidia
Gpu Display Driver
From 450 to 450.203.03
Gpu Display Driver
From 470 to 470.141.03
Gpu Display Driver
From 510 to 510.85.02
Gpu Display Driver
From 515 to 515.65.01
Running on/withPlatform Versions
Nvidia
Tesla
All versions

Related CWEs

CWE-281
Improper Preservation of Permissions
The product does not preserve permissions or incorrectly preserves permissions when copying, restoring, or sharing objects, which can cause them to have less restrictive permissions than intended.

References (4)

Source: psirt@nvidia.com
PatchVendor Advisory
Source: psirt@nvidia.com
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory

Timeline

No history available yet.