DGX-2 SBIOS: OS command injection in BIOS
CVSS 7.2CVE-2022-42290NVIDIA / GPU stackcurated
Impact
OS command injection in BIOS
Who can reach it
Network-adjacent authenticated admin
What to do
Flash SBIOS out-of-band
References
Related entries
- DGX-2 SBIOS: OOB write in BIOSCVE-2022-42286 · DGX-2 SBIOSMedium
- DGX-2 SBIOS: OS command injection in firmwareCVE-2022-42289 · DGX-2 SBIOSHigh
- BlueField-2 / BlueField-3 DPU BMC: Code injection on DPU BMCCVE-2023-31037 · BlueField-2 / BlueField-3 DPU BMCHigh
- NVIDIA Windows GPU Display Driver (nvlddmkm.sys): A kernel object created by the escape handler gets defaultCVE-2019-5687 · NVIDIA Windows GPU Display Driver (nvlddmkm.sys)High
- NVIDIA vGPU Manager (vGPU plugin): The vGPU Manager grants a guest access to memory the guest does not own. That is theCVE-2019-5697 · NVIDIA vGPU Manager (vGPU plugin)High
- NVIDIA vGPU Manager (vGPU plugin): Guest-supplied data size is not validated, letting a tenant tamper with host-sideCVE-2020-5970 · NVIDIA vGPU Manager (vGPU plugin)High
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.