7.8

CVE-2022-42254

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko), where an out-of-bounds array access may lead to denial of service, data tampering, or information disclosure.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Nvidia ≫ Virtual Gpu Version < 11.11
   Citrix ≫ Hypervisor Version -
   Linux ≫ Linux Kernel Version -
   Redhat ≫ Enterprise Linux Kernel-based Virtual Machine Version -
   VMware ≫ Vsphere Version -
Nvidia ≫ Virtual Gpu Version >= 12.0 < 13.6
   Citrix ≫ Hypervisor Version -
   Linux ≫ Linux Kernel Version -
   Redhat ≫ Enterprise Linux Kernel-based Virtual Machine Version -
   VMware ≫ Vsphere Version -
Nvidia ≫ Virtual Gpu Version >= 14.0 < 14.4
   Citrix ≫ Hypervisor Version -
   Linux ≫ Linux Kernel Version -
   Redhat ≫ Enterprise Linux Kernel-based Virtual Machine Version -
   VMware ≫ Vsphere Version -
Nvidia ≫ Cloud Gaming Version < 525.60.11
   Linux ≫ Linux Kernel Version -
Nvidia ≫ Cloud Gaming Version < 525.60.12
Nvidia ≫ Gpu Display Driver SwPlatform linux Version >= 470 < 470.161.03
   Nvidia ≫ Geforce Version -
   Nvidia ≫ Nvs Version -
   Nvidia ≫ Quadro Version -
   Nvidia ≫ Rtx Version -
   Nvidia ≫ Tesla Version -
Nvidia ≫ Gpu Display Driver SwPlatform linux Version >= 510 < 510.108.03
   Nvidia ≫ Geforce Version -
   Nvidia ≫ Nvs Version -
   Nvidia ≫ Quadro Version -
   Nvidia ≫ Rtx Version -
   Nvidia ≫ Tesla Version -
Nvidia ≫ Gpu Display Driver SwPlatform linux Version >= 515 < 515.86.01
   Nvidia ≫ Geforce Version -
   Nvidia ≫ Nvs Version -
   Nvidia ≫ Quadro Version -
   Nvidia ≫ Rtx Version -
   Nvidia ≫ Tesla Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.27% 0.181
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Nvidia 5.3 1.8 3.4
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CWE-125 Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

CWE-129 Improper Validation of Array Index

The product uses untrusted input when calculating or using an array index, but the product does not validate or incorrectly validates the index to ensure the index references a valid position within the array.

https://security.gentoo.org/glsa/202310-02
Third Party Advisory
https://nvidia.custhelp.com/app/answers/detail/a_id/5415
Vendor Advisory