CVE-2022-28191
MEDIUM5.5EPSS 0.11%Published: 5/17/2022Modified: 4/28/2026
Description
NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (nvidia.ko), where uncontrolled resource consumption can be triggered by an unprivileged regular user, which may lead to denial of service.
Affected packages (3)
- Debian/nvidia-graphics-driversfrom 0, < 470.129.06-5~deb11u1
- Debian/nvidia-graphics-drivers-tesla-460from 0
- Debian/nvidia-graphics-drivers-tesla-470from 0, < 470.129.06-1
CVSS scores
| Source | Version | Severity | Vector |
|---|---|---|---|
| osv | CVSS 3.1 | MEDIUM5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |