CVE-2022-28181
Published: 17 May 2022
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where an unprivileged regular user on the network can cause an out-of-bounds write through a specially crafted shader, which may lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering. The scope of the impact may extend to other components.
Notes
| Author | Note |
|---|---|
| mdeslaur | some binary drivers are no longer support by NVidia, so they are marked as ignored here |
Priority
Status
| Package | Release | Status |
|---|---|---|
|
nvidia-graphics-drivers-304 Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
| focal |
Does not exist
|
|
| impish |
Does not exist
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
| lunar |
Does not exist
|
|
| mantic |
Does not exist
|
|
| noble |
Does not exist
|
|
| trusty |
Does not exist
|
|
| upstream |
Needs triage
|
|
| xenial |
Ignored
|
|
|
nvidia-graphics-drivers-304-updates Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
| focal |
Does not exist
|
|
| impish |
Does not exist
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
| lunar |
Does not exist
|
|
| mantic |
Does not exist
|
|
| noble |
Does not exist
|
|
| trusty |
Does not exist
|
|
| upstream |
Needs triage
|
|
| xenial |
Not vulnerable
(superseded)
|
|
|
nvidia-graphics-drivers-340 Launchpad, Ubuntu, Debian |
bionic |
Ignored
|
| focal |
Ignored
|
|
| impish |
Not vulnerable
(superseded)
|
|
| jammy |
Not vulnerable
(superseded)
|
|
| kinetic |
Not vulnerable
(superseded)
|
|
| lunar |
Not vulnerable
(superseded)
|
|
| mantic |
Not vulnerable
(superseded)
|
|
| noble |
Does not exist
|
|
| trusty |
Does not exist
|
|
| upstream |
Needs triage
|
|
| xenial |
Ignored
|
|
|
nvidia-graphics-drivers-340-updates Launchpad, Ubuntu, Debian |
bionic |
Not vulnerable
(superseded)
|
| focal |
Does not exist
|
|
| impish |
Does not exist
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
| lunar |
Does not exist
|
|
| mantic |
Does not exist
|
|
| noble |
Does not exist
|
|
| trusty |
Does not exist
|
|
| upstream |
Needs triage
|
|
| xenial |
Not vulnerable
(superseded)
|
|
|
nvidia-graphics-drivers-352 Launchpad, Ubuntu, Debian |
bionic |
Not vulnerable
(superseded)
|
| focal |
Does not exist
|
|
| impish |
Does not exist
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
| lunar |
Does not exist
|
|
| mantic |
Does not exist
|
|
| noble |
Does not exist
|
|
| trusty |
Does not exist
|
|
| upstream |
Needs triage
|
|
| xenial |
Not vulnerable
(superseded)
|
|
|
nvidia-graphics-drivers-352-updates Launchpad, Ubuntu, Debian |
bionic |
Not vulnerable
(superseded)
|
| focal |
Does not exist
|
|
| impish |
Does not exist
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
| lunar |
Does not exist
|
|
| mantic |
Does not exist
|
|
| noble |
Does not exist
|
|
| trusty |
Does not exist
|
|
| upstream |
Needs triage
|
|
| xenial |
Not vulnerable
(superseded)
|
|
|
nvidia-graphics-drivers-361 Launchpad, Ubuntu, Debian |
bionic |
Not vulnerable
(superseded)
|
| focal |
Does not exist
|
|
| impish |
Does not exist
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
| lunar |
Does not exist
|
|
| mantic |
Does not exist
|
|
| noble |
Does not exist
|
|
| trusty |
Does not exist
|
|
| upstream |
Needs triage
|
|
| xenial |
Not vulnerable
(superseded)
|
|
|
nvidia-graphics-drivers-367 Launchpad, Ubuntu, Debian |
bionic |
Not vulnerable
(superseded)
|
| focal |
Does not exist
|
|
| impish |
Does not exist
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
| lunar |
Does not exist
|
|
| mantic |
Does not exist
|
|
| noble |
Does not exist
|
|
| trusty |
Does not exist
|
|
| upstream |
Needs triage
|
|
| xenial |
Not vulnerable
(superseded)
|
|
|
nvidia-graphics-drivers-375 Launchpad, Ubuntu, Debian |
bionic |
Not vulnerable
(superseded)
|
| focal |
Does not exist
|
|
| impish |
Does not exist
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
| lunar |
Does not exist
|
|
| mantic |
Does not exist
|
|
| noble |
Does not exist
|
|
| trusty |
Does not exist
|
|
| upstream |
Needs triage
|
|
| xenial |
Not vulnerable
(superseded)
|
|
|
nvidia-graphics-drivers-384 Launchpad, Ubuntu, Debian |
bionic |
Not vulnerable
(superseded)
|
| focal |
Does not exist
|
|
| impish |
Does not exist
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
| lunar |
Does not exist
|
|
| mantic |
Does not exist
|
|
| noble |
Does not exist
|
|
| trusty |
Does not exist
|
|
| upstream |
Needs triage
|
|
| xenial |
Needs triage
|
|
|
nvidia-graphics-drivers-390 Launchpad, Ubuntu, Debian |
bionic |
Released
(390.151-0ubuntu0.18.04.1)
|
| focal |
Released
(390.151-0ubuntu0.20.04.1)
|
|
| impish |
Released
(390.151-0ubuntu0.21.10.1)
|
|
| jammy |
Released
(390.151-0ubuntu0.22.04.1)
|
|
| kinetic |
Not vulnerable
(390.151-0ubuntu1)
|
|
| lunar |
Not vulnerable
(390.151-0ubuntu1)
|
|
| mantic |
Does not exist
|
|
| noble |
Does not exist
|
|
| trusty |
Does not exist
|
|
| upstream |
Needs triage
|
|
| xenial |
Does not exist
|
|
|
nvidia-graphics-drivers-418-server Launchpad, Ubuntu, Debian |
bionic |
Ignored
(no new nvidia releases)
|
| focal |
Ignored
(no new nvidia releases)
|
|
| impish |
Ignored
(end of life)
|
|
| jammy |
Ignored
(no new nvidia releases)
|
|
| kinetic |
Does not exist
|
|
| lunar |
Does not exist
|
|
| mantic |
Does not exist
|
|
| noble |
Does not exist
|
|
| trusty |
Does not exist
|
|
| upstream |
Needs triage
|
|
| xenial |
Does not exist
|
|
|
nvidia-graphics-drivers-430 Launchpad, Ubuntu, Debian |
bionic |
Ignored
|
| focal |
Ignored
|
|
| impish |
Ignored
|
|
| jammy |
Ignored
|
|
| kinetic |
Ignored
|
|
| lunar |
Ignored
|
|
| mantic |
Ignored
|
|
| noble |
Does not exist
|
|
| trusty |
Does not exist
|
|
| upstream |
Needs triage
|
|
| xenial |
Does not exist
|
|
|
nvidia-graphics-drivers-435 Launchpad, Ubuntu, Debian |
bionic |
Ignored
|
| focal |
Ignored
|
|
| impish |
Ignored
|
|
| jammy |
Ignored
|
|
| kinetic |
Ignored
|
|
| lunar |
Ignored
|
|
| mantic |
Ignored
|
|
| noble |
Does not exist
|
|
| trusty |
Does not exist
|
|
| upstream |
Needs triage
|
|
| xenial |
Does not exist
|
|
|
nvidia-graphics-drivers-440 Launchpad, Ubuntu, Debian |
bionic |
Ignored
|
| focal |
Ignored
|
|
| impish |
Ignored
|
|
| jammy |
Ignored
|
|
| kinetic |
Ignored
|
|
| lunar |
Ignored
|
|
| mantic |
Ignored
|
|
| noble |
Does not exist
|
|
| trusty |
Does not exist
|
|
| upstream |
Needs triage
|
|
| xenial |
Does not exist
|
|
|
nvidia-graphics-drivers-440-server Launchpad, Ubuntu, Debian |
bionic |
Ignored
|
| focal |
Ignored
|
|
| impish |
Ignored
|
|
| jammy |
Ignored
|
|
| kinetic |
Ignored
|
|
| lunar |
Ignored
|
|
| mantic |
Does not exist
|
|
| noble |
Does not exist
|
|
| trusty |
Does not exist
|
|
| upstream |
Needs triage
|
|
| xenial |
Does not exist
|
|
|
nvidia-graphics-drivers-450 Launchpad, Ubuntu, Debian |
bionic |
Ignored
(no new nvidia releases)
|
| focal |
Ignored
(no new nvidia releases)
|
|
| impish |
Ignored
(end of life)
|
|
| jammy |
Ignored
(no new nvidia releases)
|
|
| kinetic |
Ignored
(end of life, was ignored [no new nvidia releases])
|
|
| lunar |
Ignored
(end of life, was ignored [no new nvidia releases])
|
|
| mantic |
Ignored
(end of life, was ignored [no new nvidia releases])
|
|
| noble |
Does not exist
|
|
| trusty |
Does not exist
|
|
| upstream |
Needs triage
|
|
| xenial |
Does not exist
|
|
|
nvidia-graphics-drivers-450-server Launchpad, Ubuntu, Debian |
bionic |
Released
(450.191.01-0ubuntu0.18.04.1)
|
| focal |
Released
(450.191.01-0ubuntu0.20.04.1)
|
|
| impish |
Released
(450.191.01-0ubuntu0.21.10.1)
|
|
| jammy |
Released
(450.191.01-0ubuntu0.22.04.1)
|
|
| kinetic |
Not vulnerable
(450.191.01-0ubuntu1)
|
|
| lunar |
Not vulnerable
(450.191.01-0ubuntu1)
|
|
| mantic |
Does not exist
|
|
| noble |
Does not exist
|
|
| trusty |
Does not exist
|
|
| upstream |
Needs triage
|
|
| xenial |
Does not exist
|
|
|
nvidia-graphics-drivers-455 Launchpad, Ubuntu, Debian |
bionic |
Ignored
|
| focal |
Ignored
|
|
| impish |
Ignored
|
|
| jammy |
Ignored
|
|
| kinetic |
Ignored
|
|
| lunar |
Ignored
|
|
| mantic |
Ignored
|
|
| noble |
Does not exist
|
|
| trusty |
Does not exist
|
|
| upstream |
Needs triage
|
|
| xenial |
Does not exist
|
|
|
nvidia-graphics-drivers-460 Launchpad, Ubuntu, Debian |
bionic |
Ignored
(no new nvidia releases)
|
| focal |
Ignored
(no new nvidia releases)
|
|
| impish |
Ignored
(end of life)
|
|
| jammy |
Ignored
(no new nvidia releases)
|
|
| kinetic |
Ignored
(end of life, was ignored [no new nvidia releases])
|
|
| lunar |
Ignored
(end of life, was ignored [no new nvidia releases])
|
|
| mantic |
Ignored
(end of life, was ignored [no new nvidia releases])
|
|
| noble |
Does not exist
|
|
| trusty |
Does not exist
|
|
| upstream |
Needs triage
|
|
| xenial |
Does not exist
|
|
|
nvidia-graphics-drivers-460-server Launchpad, Ubuntu, Debian |
bionic |
Ignored
(no new nvidia releases)
|
| focal |
Ignored
(no new nvidia releases)
|
|
| impish |
Ignored
(end of life)
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
| lunar |
Does not exist
|
|
| mantic |
Does not exist
|
|
| noble |
Does not exist
|
|
| trusty |
Does not exist
|
|
| upstream |
Needs triage
|
|
| xenial |
Does not exist
|
|
|
nvidia-graphics-drivers-470 Launchpad, Ubuntu, Debian |
bionic |
Released
(470.129.06-0ubuntu0.18.04.1)
|
| focal |
Released
(470.129.06-0ubuntu0.20.04.1)
|
|
| impish |
Released
(470.129.06-0ubuntu0.21.10.1)
|
|
| jammy |
Released
(470.129.06-0ubuntu0.22.04.1)
|
|
| kinetic |
Not vulnerable
(470.129.06-0ubuntu1)
|
|
| lunar |
Not vulnerable
(470.129.06-0ubuntu1)
|
|
| mantic |
Not vulnerable
(470.129.06-0ubuntu1)
|
|
| noble |
Not vulnerable
(470.129.06-0ubuntu1)
|
|
| trusty |
Does not exist
|
|
| upstream |
Needs triage
|
|
| xenial |
Does not exist
|
|
|
nvidia-graphics-drivers-470-server Launchpad, Ubuntu, Debian |
bionic |
Released
(470.129.06-0ubuntu0.18.04.1)
|
| focal |
Released
(470.129.06-0ubuntu0.20.04.1)
|
|
| impish |
Released
(470.129.06-0ubuntu0.21.10.1)
|
|
| jammy |
Released
(470.129.06-0ubuntu0.22.04.1)
|
|
| kinetic |
Not vulnerable
(470.129.06-0ubuntu1)
|
|
| lunar |
Not vulnerable
(470.129.06-0ubuntu1)
|
|
| mantic |
Not vulnerable
(470.129.06-0ubuntu1)
|
|
| noble |
Not vulnerable
(470.129.06-0ubuntu1)
|
|
| trusty |
Does not exist
|
|
| upstream |
Needs triage
|
|
| xenial |
Does not exist
|
|
|
nvidia-graphics-drivers-495 Launchpad, Ubuntu, Debian |
bionic |
Not vulnerable
(superseded)
|
| focal |
Not vulnerable
(superseded)
|
|
| impish |
Not vulnerable
(superseded)
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
| lunar |
Does not exist
|
|
| mantic |
Does not exist
|
|
| noble |
Does not exist
|
|
| trusty |
Does not exist
|
|
| upstream |
Needs triage
|
|
| xenial |
Does not exist
|
|
|
nvidia-graphics-drivers-510 Launchpad, Ubuntu, Debian |
bionic |
Released
(510.73.05-0ubuntu0.18.04.1)
|
| focal |
Released
(510.73.05-0ubuntu0.20.04.1)
|
|
| impish |
Released
(510.73.05-0ubuntu0.21.10.1)
|
|
| jammy |
Released
(510.73.05-0ubuntu0.22.04.1)
|
|
| kinetic |
Not vulnerable
(510.73.05-0ubuntu1)
|
|
| lunar |
Not vulnerable
(510.73.05-0ubuntu1)
|
|
| mantic |
Not vulnerable
(510.73.05-0ubuntu1)
|
|
| noble |
Does not exist
|
|
| trusty |
Does not exist
|
|
| upstream |
Needs triage
|
|
| xenial |
Does not exist
|
|
|
nvidia-graphics-drivers-510-server Launchpad, Ubuntu, Debian |
bionic |
Released
(510.73.05-0ubuntu0.18.04.1)
|
| focal |
Released
(510.73.05-0ubuntu0.20.04.1)
|
|
| impish |
Released
(510.73.05-0ubuntu0.21.10.1)
|
|
| jammy |
Released
(510.73.05-0ubuntu0.22.04.1)
|
|
| kinetic |
Not vulnerable
(510.73.08-0ubuntu1)
|
|
| lunar |
Does not exist
|
|
| mantic |
Does not exist
|
|
| noble |
Does not exist
|
|
| trusty |
Does not exist
|
|
| upstream |
Needs triage
|
|
| xenial |
Does not exist
|
Severity score breakdown
| Parameter | Value |
|---|---|
| Base score | 9.9 |
| Attack vector | Network |
| Attack complexity | Low |
| Privileges required | Low |
| User interaction | None |
| Scope | Changed |
| Confidentiality | High |
| Integrity impact | High |
| Availability impact | High |
| Vector | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H |