CVE-2023-31021

published 2023-11-02

CVE-2023-31021: NVIDIA vGPU software for Windows and Linux contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where a malicious user in the guest VM can cause…

Priority P4 18 medium 5.5 CVSS 3.1

AV L AC L PR L UI N S U C N I N A H

NVIDIA vGPU software for Windows and Linux contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where a malicious user in the guest VM can cause a NULL-pointer dereference, which may lead to denial of service.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
nvidia	vgpu_driver_and_cloud_gaming_driver	—	—
nvidia	virtual_gpu	< 13.9	13.9
nvidia	virtual_gpu	>= 14.0 < 15.4	15.4
nvidia	virtual_gpu	>= 16.0 < 16.2	16.2

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-476