Skip to content
Fencer Vulns
medium 4.1

CVE-2022-28192 json

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (nvidia.ko), where it may lead to a use-after-free, which in turn…

published 2022-05-17 4 y ago modified 2026-06-17 4 mo ago also EUVD-2022-32646

cvss
4.1
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.2%
EPSS 0.2% chance of exploitation in 30 days, percentile 13%
public exploits
0
none known

Summary

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (nvidia.ko), where it may lead to a use-after-free, which in turn may cause denial of service. This attack is complex to carry out because the attacker needs to have control over freeing some host side resources out of sequence, which requires elevated privileges.

Patch / fix

  • nvidia virtual_gpu 11.8, 13.3
  • nvidia-graphics-drivers Debian 14, Debian 13, Debian 12 470.129.06-1
  • nvidia-graphics-drivers-tesla-470 Debian 12 470.129.06-1

debian advisories DEBIAN-CVE-2022-28192

  • nvidia-graphics-drivers-390 Ubuntu 18.04 LTS 390.151-0ubuntu0.18.04.1
  • nvidia-graphics-drivers-390 Ubuntu 20.04 LTS 390.151-0ubuntu0.20.04.1
  • nvidia-graphics-drivers-390 Ubuntu 22.04 LTS 390.151-0ubuntu0.22.04.1
  • nvidia-graphics-drivers-470 Ubuntu 18.04 LTS 470.129.06-0ubuntu0.18.04.1
  • nvidia-graphics-drivers-470 Ubuntu 20.04 LTS 470.129.06-0ubuntu0.20.04.1
  • nvidia-graphics-drivers-470 Ubuntu 22.04 LTS 470.129.06-0ubuntu0.22.04.1
  • nvidia-graphics-drivers-510 Ubuntu 18.04 LTS 510.73.05-0ubuntu0.18.04.1
  • nvidia-graphics-drivers-510 Ubuntu 20.04 LTS 510.73.05-0ubuntu0.20.04.1

ubuntu advisories UBUNTU-CVE-2022-28192

Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

  • nvidia-open Arch Linux 510.73.05-1
  • nvidia-open-dkms Arch Linux 510.73.05-1

arch linux advisories AVG-2735

Exploit prediction

0.23% chance of exploitation in the next 30 days, higher than 13% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CNA 3.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H
NVD 2.0 1.9 AV:L/AC:M/Au:N/C:N/I:N/A:P

Affected products

  • NVIDIA NVIDIA Virtual GPU Software and NVIDIA Cloud Gaming

Classification

Weakness

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.