7.8

CVE-2022-42255

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko), where an out-of-bounds array access may lead to denial of service, information disclosure, or data tampering.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Nvidia ≫ Virtual Gpu Version < 11.11
   Citrix ≫ Hypervisor Version -
   Linux ≫ Linux Kernel Version -
   Redhat ≫ Enterprise Linux Kernel-based Virtual Machine Version -
   VMware ≫ Vsphere Version -
Nvidia ≫ Virtual Gpu Version >= 12.0 < 13.6
   Citrix ≫ Hypervisor Version -
   Linux ≫ Linux Kernel Version -
   Redhat ≫ Enterprise Linux Kernel-based Virtual Machine Version -
   VMware ≫ Vsphere Version -
Nvidia ≫ Virtual Gpu Version >= 14.0 < 14.4
   Citrix ≫ Hypervisor Version -
   Linux ≫ Linux Kernel Version -
   Redhat ≫ Enterprise Linux Kernel-based Virtual Machine Version -
   VMware ≫ Vsphere Version -
Nvidia ≫ Cloud Gaming Version < 525.60.11
   Linux ≫ Linux Kernel Version -
Nvidia ≫ Cloud Gaming Version < 525.60.12
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.27% 0.181
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Nvidia 5.3 1.8 3.4
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CWE-129 Improper Validation of Array Index

The product uses untrusted input when calculating or using an array index, but the product does not validate or incorrectly validates the index to ensure the index references a valid position within the array.

CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

https://security.gentoo.org/glsa/202310-02
Third Party Advisory
https://nvidia.custhelp.com/app/answers/detail/a_id/5415
Vendor Advisory