VulnerabilityModified
CVE-2022-34677
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where an unprivileged regular user can cause an integer to be truncated, which may lead to denial of service or data tampering.
HIGH 7.1EPSS 0.29%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (0.29%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where an unprivileged regular user can cause an integer to be truncated, which may lead to denial of service or data tampering.
- CVSS 3.1
- 7.1 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
- EPSS
- 0.29% probability · 21th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-125, CWE-681
- Affected
- nvidia/gpu display driver · nvidia/cloud gaming · nvidia/virtual gpu · debian/debian linux
- Source
- psirt@nvidia.com
References
- https://lists.debian.org/debian-lts-announce/2023/05/msg00010.htmlMailing List
- https://nvidia.custhelp.com/app/answers/detail/a_id/5415Vendor Advisory
- https://security.gentoo.org/glsa/202310-02Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2023/05/msg00010.htmlMailing List
- https://nvidia.custhelp.com/app/answers/detail/a_id/5415Vendor Advisory
- https://security.gentoo.org/glsa/202310-02Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.