medium5.5
CVE-2022-34677
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where an unprivileged regular user can cause an integer to be tr…
Impact
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where an unprivileged regular user can cause an integer to be truncated, which may lead to denial of service or data tampering.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nvidia | Gpu Display Driver | from 390 before 390.157 from 470 before 470.161.03 from 510 before 510.108.03 from 515 before 515.86.01 from 525 before 525.60.11 from 450 before 450.216.04 |
| Nvidia | Cloud Gaming | before 525.60.12 before 525.60.11 |
| Nvidia | Virtual Gpu | before 11.11 from 12.0 before 13.6 from 14.0 before 14.4 |
| Debian | Debian Linux | Version 10.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://lists.debian.org/debian-lts-announce/2023/05/msg00010.html
- https://nvidia.custhelp.com/app/answers/detail/a_id/5415
- https://security.gentoo.org/glsa/202310-02
- https://lists.debian.org/debian-lts-announce/2023/05/msg00010.html
- https://nvidia.custhelp.com/app/answers/detail/a_id/5415
- https://security.gentoo.org/glsa/202310-02