Kernel Mode Layer Vulnerability in NVIDIA GPU Display Driver for Linux
CVE-2022-34682
5.5MEDIUM
Key Information:
- Vendor
- Nvidia
- Vendor
- CVE Published:
- 30 December 2022
Summary
A vulnerability exists in the NVIDIA GPU Display Driver for Linux, specifically in the kernel mode layer. This flaw allows an unprivileged regular user to induce a null-pointer dereference, resulting in a possible denial of service. Proper user privileges can prevent exploitation, but immediate action is advised to mitigate the risk of system instability.
Affected Version(s)
vGPU software (guest driver) - Linux, vGPU software (Virtual GPU Manager),NVIDIA Cloud Gaming (guest driver), NVIDIA Cloud Gaming (Virtual GPU Manager) All versions prior to and including 14.2, 13.4, and 11.9, and all versions prior to the November 2022 release
References
CVSS V3.1
Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved