CVE-2022-34674

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where a helper function maps more physical pages than were requested, which may lead to undefined behavior or an information leak.

Score

CVSS 3.1 6.8 Medium

Status

Modified - psirt@nvidia.com

Published

2022-12-30

Last modified

2025-04-11

Weaknesses

CWE-200

Affected products

• Debian Linux (Debian)
• Cloud Gaming (Nvidia)
• Gpu Display Driver (Nvidia)
• Nvidia Cloud Gaming Guest Driver (Nvidia)
• Nvidia Cloud Gaming Virtual Gpu Manager (Nvidia)
• Vgpu Software Guest Driver - Linux (Nvidia)
• Vgpu Software Virtual Gpu Manager (Nvidia)
• Virtual Gpu (Nvidia)

References

• https://lists.debian.org/debian-lts-announce/2023/05/msg00010.html
• https://nvidia.custhelp.com/app/answers/detail/a_id/5415
• https://security.gentoo.org/glsa/202310-02