NVIDIA GPU Display Driver - Windows kernel mode layer (nvlddmkm.sys): Missing data validation lets a basic user cause
Impact
Missing data validation lets a basic user cause an out-of-bounds access in kernel mode through DxgkDdiEscape, reaching privilege escalation and kernel information disclosure. Only matters to you if you run Windows GPU nodes - VDI/DaaS session hosts, cloud-gaming fleets, Windows render or CAE farms.
Who can reach it
Local and unprivileged on a Windows GPU node, through the driver's private IOCTL / DxgkDdiEscape path. Any interactive or RDP/Citrix session with a GPU handle can call it, so on a multi-session VDI host every logged-in user is in range.
What to do
Install the fixed Windows display driver from bulletin 5383. Cost: a Windows display-driver replacement reboots the node, so drain sessions first. Linux-only fleets can skip this entirely.
References
Related entries
- NVIDIA GPU Display Driver - Windows kernel mode layer (nvlddmkm.sys): An out-of-bounds write in the kernel mode layerCVE-2022-31610 · NVIDIA GPU Display Driver - Windows kernel mode layer (nvlddmkm.sys)High
- NVIDIA GPU Display Driver - Windows kernel mode layer (nvlddmkm.sys): An out-of-bounds read in the kernel mode layerCVE-2022-31617 · NVIDIA GPU Display Driver - Windows kernel mode layer (nvlddmkm.sys)High
- NVIDIA GPU Display Driver - Windows kernel mode layer (nvlddmkm.sys): An out-of-bounds read in the Windows driverCVE-2022-42267 · NVIDIA GPU Display Driver - Windows kernel mode layer (nvlddmkm.sys)High
- NVIDIA GPU Display Driver - Windows kernel mode layer (nvlddmkm.sys): An out-of-bounds read through DxgkDdiEscape leaksCVE-2022-31612 · NVIDIA GPU Display Driver - Windows kernel mode layer (nvlddmkm.sys)High
- NVIDIA GPU Display Driver - Windows kernel mode layer (nvlddmkm.sys): Any local user can null-pointer-dereferenceCVE-2022-31613 · NVIDIA GPU Display Driver - Windows kernel mode layer (nvlddmkm.sys)High
- NVIDIA GPU Display Driver - Windows kernel mode layer (nvlddmkm.sys): Improper input validation in the DxgkDdiEscapeCVE-2022-28186 · NVIDIA GPU Display Driver - Windows kernel mode layer (nvlddmkm.sys)Medium
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.