Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2022-34670


NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where an unprivileged regular user can cause truncation errors when casting a primitive to a primitive of smaller size causes data to be lost in the conversion, which may lead to denial of service or information disclosure.


Published

2022-12-30T23:15:09.337

Last Modified

2024-11-21T07:09:56.897

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.8 (HIGH)

Weaknesses
  • Type: Secondary
    CWE-197
  • Type: Primary
    CWE-681

Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application nvidia gpu_display_driver < 390.157 Yes
Application nvidia gpu_display_driver < 470.161.03 Yes
Application nvidia gpu_display_driver < 510.108.03 Yes
Application nvidia gpu_display_driver < 515.86.01 Yes
Application nvidia gpu_display_driver < 525.60.11 Yes
Application nvidia geforce - No
Application nvidia nvs - No
Application nvidia quadro - No
Application nvidia rtx - No
Application nvidia gpu_display_driver < 450.216.04 Yes
Application nvidia gpu_display_driver < 470.161.03 Yes
Application nvidia gpu_display_driver < 510.108.03 Yes
Application nvidia gpu_display_driver < 515.86.01 Yes
Application nvidia gpu_display_driver < 525.60.11 Yes
Application nvidia tesla - No
Application nvidia virtual_gpu < 11.11 Yes
Application nvidia virtual_gpu < 13.6 Yes
Application nvidia virtual_gpu < 14.4 Yes
Operating System citrix hypervisor - No
Operating System linux linux_kernel - No
Operating System redhat enterprise_linux_kernel-based_virtual_machine - No
Operating System vmware vsphere - No
Application nvidia cloud_gaming < 525.60.11 Yes
Operating System linux linux_kernel - No
Application nvidia cloud_gaming < 525.60.12 Yes
Operating System citrix hypervisor - No
Operating System redhat enterprise_linux_kernel-based_virtual_machine - No
Operating System debian debian_linux 10.0 Yes

References