VULNERABILITY INTELLIGENCE

CVE-2022-21820

CVSS score6.3 MEDIUM

EPSS probability16.51%

CISA KEVNot currently listed

Published2022-03-24

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Description

NVIDIA DCGM contains a vulnerability in nvhostengine, where a network user can cause detection of error conditions without action, which may lead to limited code execution, some denial of service, escalation of privileges, and limited impacts to both data confidentiality and integrity.

Weakness classification

psirt@nvidia.com: CWE-20
nvd@nist.gov: CWE-755

Primary references

psirt@nvidia.com — Exploit, Third Party Advisory, VDB Entry
psirt@nvidia.com — Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory