6.8

CVE-2022-34674

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where a helper function maps more physical pages than were requested, which may lead to undefined behavior or an information leak.

Data is provided by the National Vulnerability Database (NVD)
Nvidia ≫ Gpu Display Driver SwPlatformlinux Version >= 390 < 390.157
   Nvidia ≫ Geforce Version-
   Nvidia ≫ Nvs Version-
   Nvidia ≫ Quadro Version-
   Nvidia ≫ Rtx Version-
Nvidia ≫ Gpu Display Driver SwPlatformlinux Version >= 470 < 470.161.03
   Nvidia ≫ Geforce Version-
   Nvidia ≫ Nvs Version-
   Nvidia ≫ Quadro Version-
   Nvidia ≫ Rtx Version-
Nvidia ≫ Gpu Display Driver SwPlatformlinux Version >= 510 < 510.108.03
   Nvidia ≫ Geforce Version-
   Nvidia ≫ Nvs Version-
   Nvidia ≫ Quadro Version-
   Nvidia ≫ Rtx Version-
Nvidia ≫ Gpu Display Driver SwPlatformlinux Version >= 515 < 515.86.01
   Nvidia ≫ Geforce Version-
   Nvidia ≫ Nvs Version-
   Nvidia ≫ Quadro Version-
   Nvidia ≫ Rtx Version-
Nvidia ≫ Gpu Display Driver SwPlatformlinux Version >= 525 < 525.60.11
   Nvidia ≫ Geforce Version-
   Nvidia ≫ Nvs Version-
   Nvidia ≫ Quadro Version-
   Nvidia ≫ Rtx Version-
Nvidia ≫ Gpu Display Driver SwPlatformlinux Version >= 450 < 450.216.04
   Nvidia ≫ Tesla Version-
Nvidia ≫ Gpu Display Driver SwPlatformlinux Version >= 470 < 470.161.03
   Nvidia ≫ Tesla Version-
Nvidia ≫ Gpu Display Driver SwPlatformlinux Version >= 510 < 510.108.03
   Nvidia ≫ Tesla Version-
Nvidia ≫ Gpu Display Driver SwPlatformlinux Version >= 515 < 515.86.01
   Nvidia ≫ Tesla Version-
Nvidia ≫ Gpu Display Driver SwPlatformlinux Version >= 525 < 525.60.11
   Nvidia ≫ Tesla Version-
Nvidia ≫ Cloud Gaming Version < 525.60.12
Nvidia ≫ Virtual Gpu Version < 11.11
   Citrix ≫ Hypervisor Version-
   Linux ≫ Linux Kernel Version-
   Redhat ≫ Enterprise Linux Kernel-based Virtual Machine Version-
   VMware ≫ Vsphere Version-
Nvidia ≫ Virtual Gpu Version >= 12.0 < 13.6
   Citrix ≫ Hypervisor Version-
   Linux ≫ Linux Kernel Version-
   Redhat ≫ Enterprise Linux Kernel-based Virtual Machine Version-
   VMware ≫ Vsphere Version-
Nvidia ≫ Virtual Gpu Version >= 14.0 < 14.4
   Citrix ≫ Hypervisor Version-
   Linux ≫ Linux Kernel Version-
   Redhat ≫ Enterprise Linux Kernel-based Virtual Machine Version-
   VMware ≫ Vsphere Version-
Nvidia ≫ Cloud Gaming Version < 525.60.11
   Linux ≫ Linux Kernel Version-
Debian ≫ Debian Linux Version10.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.08% 0.253
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 6.1 1.8 4.2
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
psirt@nvidia.com 6.8 2.5 4.2
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.