PT-2022-26346 · Nvidia+1 · Nvidia Gpu Display Driver+1

Published 2022-12-30 · Updated 2023-10-19 · CVE-2022-42264

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NVIDIA GPU Display Driver for Linux (affected versions not specified)

Description The issue is related to an unprivileged regular user being able to cause the use of an out-of-range pointer offset in the kernel mode layer, potentially leading to data tampering, data loss, information disclosure, or denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Buffer Overflow

Weakness Enumeration

CWE-823

CWE-119

Related Identifiers

CVE-2022-42264

Affected Products

Debian

Nvidia Gpu Display Driver

References · 11

• https://security.gentoo.org/glsa/202310-02 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-42264 · Security Note
• https://nvidia.custhelp.com/app/answers/detail/a_id/5415 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-42264 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-42264 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-42264 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-42264 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-42264 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-42264 · Vendor Advisory
• https://t.me/cibsecurity/55664 · Telegram Post
• https://t.me/cvenotify/41030 · Telegram Post