CVE-2022-34677: NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where an unprivileged regular user can cause an integer to be truncated, which may…

Description

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where an unprivileged regular user can cause an integer to be truncated, which may lead to denial of service or data tampering.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Attack vector

Local

Complexity

Low

Privileges

Low

User interaction

None

Confidentiality

None

Integrity

High

Availability

High

Scope

Unchanged

Exploitation

Is it being used?

Exploit prediction (EPSS)0.3% · higher than 21% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

CG

Cloud Gaming · Nvidia

before 525.60.12; before 525.60.11 · source: NVD

DL

Debian Linux · Debian

10.0 · source: NVD

GD

Gpu Display Driver · Nvidia

390 before 390.157; 470 before 470.161.03; 510 before 510.108.03; 515 before 515.86.01; 525 before 525.60.11; 450 before 450.216.04; +4 more · source: NVD

VG

Virtual Gpu · Nvidia

before 11.11; 12.0 before 13.6; 14.0 before 14.4 · source: NVD