CVE-2023-31021 is a NULL-pointer dereference vulnerability in the NVIDIA vGPU software's Virtual GPU Manager, affecting various virtualization platforms including Canonical, Citrix, Microsoft, Red Hat, and VMware. A malicious user within a guest VM can exploit this to cause a denial of service. Rated Medium severity (CVSS 5.5), it requires local access and low attack complexity, with the primary impact being system unavailability. There is no evidence of active exploitation, public exploit code, or significant community discussion, and it is not listed in CISA's KEV catalog.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 13.9CPE matchmatch criteria | cpe:2.3:a:nvidia:virtual_gpu:*:*:*:*:*:*:*:* | ||
>= 14.0, < 15.4CPE matchmatch criteria | cpe:2.3:a:nvidia:virtual_gpu:*:*:*:*:*:*:*:* | ||
>= 16.0, < 16.2CPE matchmatch criteria | cpe:2.3:a:nvidia:virtual_gpu:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.