Integer Overflow Vulnerability in NVIDIA GPU Display Driver for Linux
CVE-2022-42257

5.3MEDIUM

Key Information:

Vendor: Nvidia
Status: Vgpu Software (guest Driver) - Linux, Vgpu Software (virtual Gpu Manager), Nvidia Cloud Gaming (guest Driver), Nvidia Cloud Gaming (virtual Gpu Manager)
Vendor: CVE Published:; 30 December 2022

Summary

The NVIDIA GPU Display Driver for Linux has a vulnerability within the kernel mode layer (nvidia.ko) that is caused by an integer overflow. This flaw could potentially be exploited to disclose sensitive information, manipulate data, or cause a denial of service, thereby impacting the system’s functionality and integrity. It is critically important for users of the affected driver version to implement the security updates provided to mitigate these risks.

Affected Version(s)

vGPU software (guest driver) - Linux, vGPU software (Virtual GPU Manager), NVIDIA Cloud Gaming (guest driver), NVIDIA Cloud Gaming (Virtual GPU Manager) All versions prior to and including 14.2, 13.4, and 11.9, and all versions prior to the November 2022 release