Integer Truncation Vulnerability in NVIDIA GPU Display Driver for Linux
CVE-2022-34677
5.5MEDIUM
Key Information:
- Vendor
- Nvidia
- Vendor
- CVE Published:
- 30 December 2022
Summary
The NVIDIA GPU Display Driver for Linux has a security issue within its kernel mode layer handler. An unprivileged regular user can exploit this vulnerability to trigger integer truncation, potentially causing denial of service or allowing modified data outputs. System administrators are urged to apply security updates to mitigate risks associated with this flaw.
Affected Version(s)
vGPU software (guest driver) - Linux, vGPU software (Virtual GPU Manager), NVIDIA Cloud Gaming (guest driver), NVIDIA Cloud Gaming (Virtual GPU Manager) All versions prior to and including 14.2, 13.4, and 11.9, and all versions prior to the November 2022 release
References
CVSS V3.1
Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved