Skip to content
Fencer Vulns
medium 6.1

CVE-2022-21814 json

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel driver package, where improper handling of insufficient permissi…

published 2022-02-07 4 y ago modified 2026-06-17 4 mo ago also EUVD-2022-26974

cvss
6.1
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.2%
EPSS 0.2% chance of exploitation in 30 days, percentile 14%
public exploits
0
none known

Summary

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel driver package, where improper handling of insufficient permissions or privileges may allow an unprivileged local user limited write access to protected memory, which can lead to denial of service.

Patch / fix

  • nvidia-graphics-drivers Debian 14, Debian 13, Debian 12 470.103.01-1
  • nvidia-graphics-drivers-tesla-470 Debian 12 470.103.01-1

debian advisories DEBIAN-CVE-2022-21814

  • nvidia-graphics-drivers-470 Ubuntu 18.04 LTS 470.103.01-0ubuntu0.18.04.1
  • nvidia-graphics-drivers-470 Ubuntu 20.04 LTS 470.103.01-0ubuntu0.20.04.1
  • nvidia-graphics-drivers-510 Ubuntu 18.04 LTS 510.47.03-0ubuntu0.18.04.1
  • nvidia-graphics-drivers-510 Ubuntu 20.04 LTS 510.47.03-0ubuntu0.20.04.1
  • nvidia-graphics-drivers-450-server Ubuntu 18.04 LTS 450.172.01-0ubuntu0.18.04.1
  • nvidia-graphics-drivers-450-server Ubuntu 20.04 LTS 450.172.01-0ubuntu0.20.04.1
  • nvidia-graphics-drivers-470-server Ubuntu 18.04 LTS 470.103.01-0ubuntu0.18.04.1
  • nvidia-graphics-drivers-470-server Ubuntu 20.04 LTS 470.103.01-0ubuntu0.20.04.1

ubuntu advisories UBUNTU-CVE-2022-21814

Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

Exploit prediction

0.23% chance of exploitation in the next 30 days, higher than 14% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CNA 3.1 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H
NVD 3.1 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H
NVD 2.0 3.6 AV:L/AC:L/Au:N/C:N/I:P/A:P

Affected products

  • NVIDIA NVIDIA GPU Display Driver

Classification

Weakness
  • CWE-280 Improper Handling of Insufficient Permissions or Privileges
  • CWE-755 Improper Handling of Exceptional Conditions

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.