CVE-2022-21815 Null dereference in NVIDIA GPU Display Driver

Medium 5.5 Published 7 Feb 2022 Updated 3 Aug 2024

A NULL pointer dereference in the NVIDIA GPU driver kernel mode layer allows local attackers to cause a system crash via private IOCTLs.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Local or same network only
Victim action needed: Not needed
Fix: None listed

What is CVE-2022-21815?

CVE-2022-21815 is a medium-severity vulnerability in Nvidia Gpu Display Driver, published on 7 Feb 2022. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for private IOCTLs where a NULL pointer dereference in the kernel, created within user mode code, may lead to a denial of service in the form of a system crash.

Weakness: CWE-476

Which versions are affected by CVE-2022-21815?

It affects 9 products.

Products include Nvidia Cloud Gaming Guest, Nvidia Geforce, Nvidia Gpu Display Driver, Nvidia Nvs, Nvidia Quadro, Nvidia Rtx and 3 more.

How do I fix CVE-2022-21815?

No fix has been published for CVE-2022-21815 yet. Limit exposure of the affected software until one is available.

Is CVE-2022-21815 being exploited?

There is no known exploitation of CVE-2022-21815 in the wild and no public exploit code.

All Nvidia Gpu Display Driver vulnerabilities

Sources

Also known as GHSA-g3fg-h99q-fqq7.