Free and open · new CVEs checked every 20 minutesStatusRSSOpen dataContact

CVE-2022-31612: NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler

28
Routine
HIGH 7.1UPGRADEUPGRADEUPGRADE

CVE-2022-31612 is a high-severity flaw (CVSS 7.1) affecting gpu display driver, virtual gpu, cloud gaming guest. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where a local user with basic capabilities can cause an out-of-bounds read, which may lead to a system crash or a leak of internal kernel information.

Why this priority

  • High severity

A fixed release or distro patch exists.

Risk facts

CVSS score7.1 (High)
Attack vectorLocal
Attack complexityLow
Privileges neededLow
User interactionNone
EPSS exploit chance0.2% (top 88%)
CISA exploited listNo
WeaknessCWE-125
Published2022-11-19
Last modified2026-06-17
Publisher (CNA): NVIDIA Corporation · Vendor: nvidia

Share: LinkedIn · X · Reddit

Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Am I affected?

Timeline

nvidia gpu display driver UPGRADE
Affected: >= 471.11 and < 473.81 · >= 516.25 and < 516.94 · >= 511.09 and < 513.46 · >= 451.48 and < 453.64 · >= 471.11 and < 472.81
Fixed in: 453.64, 472.81, 473.81, 513.46, 516.94
Safe to downgrade to: a release before 451.48
1. Check installed version
apt-cache policy gpu-display-driver || rpm -q gpu-display-driver || gpu-display-driver --version
2. UPGRADE to 453.64 (Debian / Ubuntu)
sudo apt update && sudo apt install --only-upgrade gpu-display-driver
2. UPGRADE (RHEL / Amazon Linux / Fedora)
sudo dnf upgrade gpu-display-driver
Note
Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.
3. If no update is available yet, DOWNGRADE to a release before 451.48 (Debian / Ubuntu)
apt-cache madison gpu-display-driver sudo apt install gpu-display-driver=<VERSION_BEFORE_451.48> sudo apt-mark hold gpu-display-driver
3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)
dnf --showduplicates list gpu-display-driver sudo dnf downgrade gpu-display-driver-<VERSION_BEFORE_451.48> sudo dnf versionlock add gpu-display-driver
Downgrade risk
Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.
After downgrade
Restart the service, and keep the package held until a fixed release ships.
nvidia virtual gpu UPGRADE
Affected: >= 11.0 and < 11.8 · >= 13.0 and < 13.3 · 14.0
Fixed in: 11.8, 13.3
Safe to downgrade to: a release before 11.0
1. Check installed version
apt-cache policy virtual-gpu || rpm -q virtual-gpu || virtual-gpu --version
2. UPGRADE to 11.8 (Debian / Ubuntu)
sudo apt update && sudo apt install --only-upgrade virtual-gpu
2. UPGRADE (RHEL / Amazon Linux / Fedora)
sudo dnf upgrade virtual-gpu
Note
Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.
3. If no update is available yet, DOWNGRADE to a release before 11.0 (Debian / Ubuntu)
apt-cache madison virtual-gpu sudo apt install virtual-gpu=<VERSION_BEFORE_11.0> sudo apt-mark hold virtual-gpu
3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)
dnf --showduplicates list virtual-gpu sudo dnf downgrade virtual-gpu-<VERSION_BEFORE_11.0> sudo dnf versionlock add virtual-gpu
Downgrade risk
Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.
After downgrade
Restart the service, and keep the package held until a fixed release ships.
nvidia cloud gaming guest UPGRADE
Affected: < 516.94
Fixed in: 516.94
Safe to downgrade to: no unaffected older release
1. Check installed version
apt-cache policy cloud-gaming-guest || rpm -q cloud-gaming-guest || cloud-gaming-guest --version
2. UPGRADE to 516.94 (Debian / Ubuntu)
sudo apt update && sudo apt install --only-upgrade cloud-gaming-guest
2. UPGRADE (RHEL / Amazon Linux / Fedora)
sudo dnf upgrade cloud-gaming-guest
Note
Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.
Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2022-31612?

gpu display driver: upgrade to 453.64, 472.81, 473.81, 513.46, 516.94; virtual gpu: upgrade to 11.8, 13.3; cloud gaming guest: upgrade to 516.94. Exact commands for each OS are on this page.

Is CVE-2022-31612 being exploited?

CVE-2022-31612 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2022-31612 affect?

CVE-2022-31612 affects gpu display driver, virtual gpu, cloud gaming guest. Severity is high (CVSS 7.1). NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where a local user with basic capabilities can cause an out-of-bounds read, which may lead to a system crash o

How urgent is CVE-2022-31612?

Priority 28/100. High severity

Software pages

Windows vulnerabilities · NVIDIA vulnerabilities

Related CVEs

References

← Back to latest CVEs

Get the weekly exploited-CVE digest by emailThe CVEs being attacked this week and how to fix them. No spam, unsubscribe any time.