CVE-2022-21815

Severity: medium (CVSS 5.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-02-07 · updated 2026-06-17
Weakness: CWE-476

Description

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for private IOCTLs where a NULL pointer dereference in the kernel, created within user mode code, may lead to a denial of service in the form of a system crash.

Affected products

NVIDIA Cloud Gaming Guest: all versions
NVIDIA GeForce: all versions
NVIDIA Guest driver: all versions
NVIDIA Nvs: all versions
NVIDIA Quadro: all versions
NVIDIA Rtx: all versions
NVIDIA Studio: all versions
NVIDIA Tesla: all versions
NVIDIA Virtual GPU Software: all versions

References

https://nvidia.custhelp.com/app/answers/detail/a_id/5312
https://nvidia.custhelp.com/app/answers/detail/a_id/5312

Get alerted when CVE-2022-21815 or the next vulnerability affects your stack