CVEvulnerability

CVE-2022-34677

7.1 HIGH Published 2022-12-30 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-12-30
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS 3.1 ([email protected])
7.1 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Weaknesses
CWE-125, CWE-681

Description

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where an unprivileged regular user can cause an integer to be truncated, which may lead to denial of service or data tampering.

Affected configurations

• nvidia gpu display driver (>= 390 < 390.157) • nvidia gpu display driver (>= 470 < 470.161.03) • nvidia gpu display driver (>= 510 < 510.108.03) • nvidia gpu display driver (>= 515 < 515.86.01) • nvidia gpu display driver (>= 525 < 525.60.11) • nvidia gpu display driver (>= 450 < 450.216.04) • nvidia cloud gaming (< 525.60.12) • nvidia virtual gpu (< 11.11) • nvidia virtual gpu (>= 12.0 < 13.6) • nvidia virtual gpu (>= 14.0 < 14.4) • nvidia cloud gaming (< 525.60.11) • debian debian linux 10.0

Related

Weakness · CWE (2)

  • CWE-125 Out-of-bounds Read weakness
  • CWE-681 Incorrect Conversion between Numeric Types weakness

References