CVE-2022-42256

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-42256
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko), where an integer overflow in index validation may lead to denial of service, information disclosure, or data tampering.

5.3 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.4

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact LOW

Scope UNCHANGED

References
Link Resource
https://nvidia.custhelp.com/app/answers/detail/a_id/5415 Vendor Advisory
https://security.gentoo.org/glsa/202310-02 Third Party Advisory
https://nvidia.custhelp.com/app/answers/detail/a_id/5415 Vendor Advisory
https://security.gentoo.org/glsa/202310-02 Third Party Advisory
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:a:nvidia:virtual_gpu:*:*:*:*:*:*:*:*
cpe:2.3:a:nvidia:virtual_gpu:*:*:*:*:*:*:*:*
cpe:2.3:a:nvidia:virtual_gpu:*:*:*:*:*:*:*:*
OR cpe:2.3:o:citrix:hypervisor:-:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_kernel-based_virtual_machine:-:*:*:*:*:*:*:*
cpe:2.3:o:vmware:vsphere:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:a:nvidia:cloud_gaming:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:a:nvidia:cloud_gaming:*:*:*:*:*:*:*:*
OR cpe:2.3:o:citrix:hypervisor:-:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_kernel-based_virtual_machine:-:*:*:*:*:*:*:*
History

21 Nov 2024, 07:24

Type Values Removed Values Added
Summary
  • (es) NVIDIA GPU Display Driver para Linux contiene una vulnerabilidad en la capa del modo kernel (nvidia.ko), donde un desbordamiento de enteros en la validación del índice puede provocar Denegación de Servicio (DoS), divulgación de información o manipulación de datos.
CVSS v2 : unknown
v3 : 7.8 		v2 : unknown
v3 : 5.3
References () https://nvidia.custhelp.com/app/answers/detail/a_id/5415 - Vendor Advisory () https://nvidia.custhelp.com/app/answers/detail/a_id/5415 - Vendor Advisory
References () https://security.gentoo.org/glsa/202310-02 - Third Party Advisory () https://security.gentoo.org/glsa/202310-02 - Third Party Advisory
Information

Published : 2022-12-30 23:15

Updated : 2024-11-21 07:24

NVD link : CVE-2022-42256

Mitre link : CVE-2022-42256

CVE.ORG link : CVE-2022-42256

JSON object : View

Products Affected

citrix

  • hypervisor

redhat

  • enterprise_linux_kernel-based_virtual_machine

nvidia

  • virtual_gpu
  • cloud_gaming

linux

  • linux_kernel

vmware

  • vsphere
CWE
CWE-190

Integer Overflow or Wraparound