NVIDIA GPU Display Driver - Windows kernel mode layer (nvlddmkm.sys): An uncontrolled DLL loading path in the display
Impact
An uncontrolled DLL loading path in the display driver lets a local attacker plant a DLL and get code execution at driver-install privilege - a classic path to SYSTEM on Windows GPU hosts. Only matters to you if you run Windows GPU nodes - VDI/DaaS session hosts, cloud-gaming fleets, Windows render or CAE farms.
Who can reach it
Local and unprivileged on a Windows GPU node, through the driver's private IOCTL / DxgkDdiEscape path. Any interactive or RDP/Citrix session with a GPU handle can call it, so on a multi-session VDI host every logged-in user is in range.
What to do
Install the fixed Windows display driver from bulletin 5703. Cost: a Windows display-driver replacement reboots the node, so drain sessions first. Linux-only fleets can skip this entirely.
References
Related entries
- NVIDIA GPU Display Driver - Windows kernel mode layer (nvlddmkm.sys): Missing data validation lets a basic user causeCVE-2022-31606 · NVIDIA GPU Display Driver - Windows kernel mode layer (nvlddmkm.sys)High
- NVIDIA GPU Display Driver - Windows kernel mode layer (nvlddmkm.sys): An out-of-bounds write in the kernel mode layerCVE-2022-31610 · NVIDIA GPU Display Driver - Windows kernel mode layer (nvlddmkm.sys)High
- NVIDIA GPU Display Driver - Windows kernel mode layer (nvlddmkm.sys): An out-of-bounds read in the kernel mode layerCVE-2022-31617 · NVIDIA GPU Display Driver - Windows kernel mode layer (nvlddmkm.sys)High
- NVIDIA GPU Display Driver - Windows kernel mode layer (nvlddmkm.sys): An out-of-bounds read in the Windows driverCVE-2022-42267 · NVIDIA GPU Display Driver - Windows kernel mode layer (nvlddmkm.sys)High
- NVIDIA GPU Display Driver - Windows kernel mode layer (nvlddmkm.sys): An out-of-bounds read through DxgkDdiEscape leaksCVE-2022-31612 · NVIDIA GPU Display Driver - Windows kernel mode layer (nvlddmkm.sys)High
- NVIDIA GPU Display Driver - Windows kernel mode layer (nvlddmkm.sys): Any local user can null-pointer-dereferenceCVE-2022-31613 · NVIDIA GPU Display Driver - Windows kernel mode layer (nvlddmkm.sys)High
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.