CVEvulnerability

CVE-2022-31609

7.8 HIGH Published 2022-08-05 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-08-05
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-285

Description

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where it allows the guest VM to allocate resources for which the guest is not authorized. This vulnerability may lead to loss of data integrity and confidentiality, denial of service, or information disclosure.

Affected configurations

• nvidia virtual gpu (>= 11.0 < 11.8) • nvidia virtual gpu (>= 13.0 < 13.3) • nvidia virtual gpu 14.0 • nvidia virtual gpu 14.1

Related

Weakness · CWE (1)

  • CWE-285 Improper Authorization weakness

References