← Back

CVE-2022-34684

nvd nist
Published: Dec 30, 2022Modified: Jun 17, 2026

JSON object

Loading...
7.1
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Exploitability: 1.8 / Impact: 5.2
Source: NVD

Description

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko), where an off-by-one error may lead to data tampering or information disclosure.

Affected (7)

Nvidia
3 products
Virtual Gpu
Cloud Gaming
Gpu Display Driver
Configuration A
3 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Nvidia
Virtual Gpu
Before 11.11
Virtual Gpu
From 12.0 to 13.6
Virtual Gpu
From 14.0 to 14.4
Running on/withPlatform Versions
Vmware
Vsphere
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Cloud Gaming
Before 525.60.11
Running on/withPlatform Versions
Linux
Linux Kernel
All versions
Configuration C
1 vulnerable · 2 platform
Vulnerable SoftwareAffected Versions
Cloud Gaming
Before 525.60.12
Running on/withPlatform Versions
Citrix
Hypervisor
All versions
Redhat
Enterprise Linux Kernel Based Virtual Machine
All versions
Configuration D
2 vulnerable · 5 platform
Vulnerable SoftwareAffected Versions
Nvidia
Gpu Display Driver
From 510 to 510.108.03
Gpu Display Driver
From 515 to 515.86.01
Running on/withPlatform Versions
Nvidia
Geforce
All versions
Nvidia
Nvs
All versions
Nvidia
Quadro
All versions
Nvidia
Rtx
All versions
Nvidia
Tesla
All versions

Related CWEs

CWE-125
Out-of-bounds Read
The product reads data past the end, or before the beginning, of the intended buffer.
CWE-193
Off-by-one Error
A product calculates or uses an incorrect maximum or minimum value that is 1 more, or 1 less, than the correct value.

References (4)

Source: psirt@nvidia.com
Vendor Advisory
Source: psirt@nvidia.com
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory

Timeline

No history available yet.