Lucene search

K
nvd[email protected]NVD:CVE-2022-34676
HistoryDec 30, 2022 - 11:15 p.m.

CVE-2022-34676

2022-12-3023:15:09
CWE-197
CWE-125
web.nvd.nist.gov
6
nvidia
linux
vulnerability
kernel mode
denial of service
information disclosure
data tampering

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0

Percentile

13.0%

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where an out-of-bounds read may lead to denial of service, information disclosure, or data tampering.

Affected configurations

Nvd
Node
nvidiavirtual_gpuRange<11.11
OR
nvidiavirtual_gpuRange12.013.6
OR
nvidiavirtual_gpuRange14.014.4
AND
citrixhypervisorMatch-
OR
linuxlinux_kernelMatch-
OR
redhatenterprise_linux_kernel-based_virtual_machineMatch-
OR
vmwarevsphereMatch-
Node
nvidiacloud_gamingRange<525.60.11
AND
linuxlinux_kernelMatch-
Node
nvidiacloud_gamingRange<525.60.12
AND
citrixhypervisorMatch-
OR
redhatenterprise_linux_kernel-based_virtual_machineMatch-
VendorProductVersionCPE
nvidiavirtual_gpu*cpe:2.3:a:nvidia:virtual_gpu:*:*:*:*:*:*:*:*
citrixhypervisor-cpe:2.3:o:citrix:hypervisor:-:*:*:*:*:*:*:*
linuxlinux_kernel-cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
redhatenterprise_linux_kernel-based_virtual_machine-cpe:2.3:o:redhat:enterprise_linux_kernel-based_virtual_machine:-:*:*:*:*:*:*:*
vmwarevsphere-cpe:2.3:o:vmware:vsphere:-:*:*:*:*:*:*:*
nvidiacloud_gaming*cpe:2.3:a:nvidia:cloud_gaming:*:*:*:*:*:*:*:*

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0

Percentile

13.0%