Lucene search

K
ubuntucveUbuntu.comUB:CVE-2022-42257
HistoryDec 30, 2022 - 12:00 a.m.

CVE-2022-42257

2022-12-3000:00:00
ubuntu.com
ubuntu.com
17
nvidia
gpu
display driver
linux
vulnerability
kernel mode
integer overflow
information disclosure
data tampering
denial of service
mdeslaur
binary drivers
nvidia
ignored
unix

CVSS3

7.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H

EPSS

0

Percentile

13.0%

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel
mode layer (nvidia.ko), where an integer overflow may lead to information
disclosure, data tampering or denial of service.

Notes

Author Note
mdeslaur some binary drivers are no longer support by NVidia, so they are marked as ignored here

CVSS3

7.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H

EPSS

0

Percentile

13.0%