
CVE-2022-31615 – Gentoo Linux Security Advisory 202310-02
https://notcve.org/view.php?id=CVE-2022-31615
04 Aug 2022 — NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where a local user with basic capabilities can cause a null-pointer dereference, which may lead to denial of service. NVIDIA GPU Display Driver para Linux contiene una vulnerabilidad en la capa del modo kernel, donde un usuario local con capacidades básicas puede provocar una desreferencia de puntero nulo, lo que puede provocar una Denegación de Servicio (DoS). Le Wu discovered that the NVIDIA graphics drivers did not pro... • https://nvidia.custhelp.com/app/answers/detail/a_id/5383 • CWE-476: NULL Pointer Dereference •

CVE-2022-31607 – Gentoo Linux Security Advisory 202310-02
https://notcve.org/view.php?id=CVE-2022-31607
04 Aug 2022 — NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko), where a local user with basic capabilities can cause improper input validation, which may lead to denial of service, escalation of privileges, data tampering, and limited information disclosure. NVIDIA GPU Display Driver para Linux contiene una vulnerabilidad en la capa del modo kernel (nvidia.ko), donde un usuario local con capacidades básicas puede provocar una validación de entrada incorrecta, lo que puede ... • https://nvidia.custhelp.com/app/answers/detail/a_id/5383 • CWE-20: Improper Input Validation •

CVE-2022-31608 – Gentoo Linux Security Advisory 202310-02
https://notcve.org/view.php?id=CVE-2022-31608
04 Aug 2022 — NVIDIA GPU Display Driver for Linux contains a vulnerability in an optional D-Bus configuration file, where a local user with basic capabilities can impact protected D-Bus endpoints, which may lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering. NVIDIA GPU Display Driver para Linux contiene una vulnerabilidad en un archivo de configuración opcional de D-Bus, donde un usuario local con capacidades básicas puede afectar los endpoints protegidos de D-... • https://nvidia.custhelp.com/app/answers/detail/a_id/5383 • CWE-281: Improper Preservation of Permissions •

CVE-2022-21815
https://notcve.org/view.php?id=CVE-2022-21815
07 Feb 2022 — NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for private IOCTLs where a NULL pointer dereference in the kernel, created within user mode code, may lead to a denial of service in the form of a system crash. NVIDIA GPU Display Driver para Windows contiene una vulnerabilidad en el manejador de la capa del modo kernel (nvlddmkm.sys) para las IOCTL privadas en la que una desreferencia del puntero NULL en el kernel, creada dentro del código del mod... • https://nvidia.custhelp.com/app/answers/detail/a_id/5312 • CWE-476: NULL Pointer Dereference •

CVE-2022-21813 – Gentoo Linux Security Advisory 202310-02
https://notcve.org/view.php?id=CVE-2022-21813
07 Feb 2022 — NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel driver, where improper handling of insufficient permissions or privileges may allow an unprivileged local user limited write access to protected memory, which can lead to denial of service. NVIDIA GPU Display Driver para Linux contiene una vulnerabilidad en el controlador del kernel, donde el manejo inapropiado de permisos o privilegios insuficientes puede permitir a un usuario local no privilegiado un acceso de escritura limitado a ... • https://nvidia.custhelp.com/app/answers/detail/a_id/5312 • CWE-284: Improper Access Control CWE-755: Improper Handling of Exceptional Conditions •

CVE-2022-21814 – Gentoo Linux Security Advisory 202310-02
https://notcve.org/view.php?id=CVE-2022-21814
07 Feb 2022 — NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel driver package, where improper handling of insufficient permissions or privileges may allow an unprivileged local user limited write access to protected memory, which can lead to denial of service. NVIDIA GPU Display Driver para Linux contiene una vulnerabilidad en el paquete de controladores del kernel, donde el manejo inapropiado de permisos o privilegios insuficientes puede permitir a un usuario local no privilegiado un acceso de ... • https://nvidia.custhelp.com/app/answers/detail/a_id/5312 • CWE-280: Improper Handling of Insufficient Permissions or Privileges CWE-755: Improper Handling of Exceptional Conditions •

CVE-2021-23175
https://notcve.org/view.php?id=CVE-2021-23175
23 Dec 2021 — NVIDIA GeForce Experience contains a vulnerability in user authorization, where GameStream does not correctly apply individual user access controls for users on the same device, which, with user intervention, may lead to escalation of privileges, information disclosure, data tampering, and denial of service, affecting other resources beyond the intended security authority of GameStream. NVIDIA GeForce Experience contiene una vulnerabilidad en la autorización de usuarios, en la que GameStream no aplica corre... • https://nvidia.custhelp.com/app/answers/detail/a_id/5295 • CWE-863: Incorrect Authorization •

CVE-2021-34400
https://notcve.org/view.php?id=CVE-2021-34400
20 Nov 2021 — NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller which may allow a user with elevated privileges to gain access to information from unscrubbed memory, which may lead to information disclosure. La GPU NVIDIA y el hardware Tegra contienen una vulnerabilidad en el microcontrolador interno que puede permitir a un usuario con altos privilegios acceder a información de la memoria no depurada, que puede conllevar a una divulgación de información • https://nvidia.custhelp.com/app/answers/detail/a_id/5263 •

CVE-2021-34399
https://notcve.org/view.php?id=CVE-2021-34399
20 Nov 2021 — NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller which may allow a user with elevated privileges to gain access to information from unscrubbed registers, which may lead to information disclosure. La GPU NVIDIA y el hardware Tegra contienen una vulnerabilidad en el microcontrolador interno que puede permitir a un usuario con altos privilegios acceder a información de registros no depurados, que puede conllevar a una divulgación de información • https://nvidia.custhelp.com/app/answers/detail/a_id/5263 •

CVE-2021-23219
https://notcve.org/view.php?id=CVE-2021-23219
20 Nov 2021 — NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller, which may allow a user with elevated privileges to access protected information by identifying, exploiting, and loading vulnerable microcode. Such an attack may lead to information disclosure. La GPU NVIDIA y el hardware Tegra contienen una vulnerabilidad en el microcontrolador interno que puede permitir a un usuario con privilegios elevados acceder a información protegida identificando, explotando y cargando microcódigo ... • https://nvidia.custhelp.com/app/answers/detail/a_id/5263 •