CVE-2022-31609: NVIDIA Virtual GPU

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where it allows the guest VM to allocate resources for which the guest is not authorized. This vulnerability may lead to loss of data integrity and confidentiality, denial of service, or information disclosure.

Affected products

• NVIDIA Virtual GPU: from 11.0, before 11.8 (fixed in 11.8); from 13.0, before 13.3 (fixed in 13.3); version 14.0 only; version 14.1 only

Published 2022-08-05. Last modified 2026-06-17.