CVE-2022-42257

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko), where an integer overflow may lead to information disclosure, data tampering or denial of service.

Score

CVSS 3.1 7.3 High

Status

Modified - psirt@nvidia.com

Published

2022-12-30

Last modified

2025-04-23

Weaknesses

CWE-190

Affected products

• Debian Linux (Debian)
• Cloud Gaming (Nvidia)
• Gpu Display Driver (Nvidia)
• Nvidia Cloud Gaming Guest Driver (Nvidia)
• Nvidia Cloud Gaming Virtual Gpu Manager (Nvidia)
• Vgpu Software Guest Driver - Linux (Nvidia)
• Vgpu Software Virtual Gpu Manager (Nvidia)
• Virtual Gpu (Nvidia)

References

• https://lists.debian.org/debian-lts-announce/2023/05/msg00010.html
• https://nvidia.custhelp.com/app/answers/detail/a_id/5415
• https://security.gentoo.org/glsa/202310-02