CVE-2022-31618

Published: Aug 5, 2022Modified: Jun 17, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: psirt@nvidia.com (Secondary)

Description

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where it can dereference a null pointer, which may lead to denial of service.

Affected (4)

Products: Nvidia: Virtual Gpu

Nvidia

1 product

Virtual Gpu

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Nvidia Virtual Gpu	From 11.0 to 11.8
Nvidia Virtual Gpu	From 13.0 to 13.3
Nvidia Virtual Gpu	Version 14.0
Nvidia Virtual Gpu	Version 14.1

Related CWEs

CWE-476

NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

References (2)

https://nvidia.custhelp.com/app/answers/detail/a_id/5383

Source: psirt@nvidia.com

PatchVendor Advisory

https://nvidia.custhelp.com/app/answers/detail/a_id/5383

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.