CVE-2022-31607

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-11-19 · updated 2026-06-17
Weakness: CWE-20

Description

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko), where a local user with basic capabilities can cause improper input validation, which may lead to denial of service, escalation of privileges, data tampering, and limited information disclosure.

Affected products

NVIDIA Cloud Gaming Guest: before 515.65.01 — fixed in 515.65.01
NVIDIA Guest driver: from 390 before 390.154; from 470 before 470.141.03; from 510 before 510.85.02; from 515 before 515.65.01; from 450 before 450.203.03 — fixed in 390.154, 450.203.03, 470.141.03, 510.85.02, 515.65.01

How to fix

Upgrade to a fixed version: NVIDIA Cloud Gaming Guest 515.65.01; NVIDIA Guest driver 390.154, 450.203.03, 470.141.03, 510.85.02. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2022-31607 or the next vulnerability affects your stack