CVE-2022-34665: Null Pointer Dereference

Q: What is CVE-2022-34665?

CVE-2022-34665 is a vulnerability found in NVIDIA GPU Display Driver for Windows and Linux, which can be exploited by a local user to cause a denial of service.

Q: How severe is CVE-2022-34665?

CVE-2022-34665 has a severity rating of medium, with a CVSS score of 6.5.

Q: What is the affected software for CVE-2022-34665?

The affected software for CVE-2022-34665 includes NVIDIA GPU Display Driver for Windows and Linux.

Q: How can CVE-2022-34665 be exploited?

CVE-2022-34665 can be exploited by a local user with basic capabilities to cause a null-pointer dereference, leading to a denial of service.

Q: Where can I find more information about CVE-2022-34665?

You can find more information about CVE-2022-34665 on the NVIDIA customer help website and the Gentoo Security website.

Published Nov 18, 2022

Updated

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a local user with basic capabilities can cause a null-pointer dereference, which may lead to denial of service.

Affected Software

25 affected componentsFixes available

Nvidia Gpu Display Driver Windows>=471.11<473.81

Nvidia Gpu Display Driver Windows>=516.25<516.94

Nvidia Geforce

Nvidia Virtual GPU>=11.0<11.8

Nvidia Virtual GPU>=13.0<13.3

Nvidia Virtual GPU=14.0

Linux Linux kernel

Microsoft Windows

Nvidia Cloud Gaming Guest<516.94

Nvidia Studio

Nvidia Gpu Display Driver Windows>=511.09<513.46

Nvidia Gpu Display Driver Windows>=451.48<453.64

Nvidia Gpu Display Driver Windows>=471.11<472.81

Nvidia Tesla

debian/nvidia-graphics-drivers<470.141.03-1

470.141.03-1

debian/nvidia-graphics-drivers<470.141.03-1

470.141.03-1

debian/nvidia-graphics-drivers<470.141.03-1

470.141.03-1

debian/nvidia-graphics-drivers-tesla-470<470.141.03-1

470.141.03-1

debian/nvidia-graphics-drivers

535.261.03-1535.309.01-0+deb12u1550.163.01-2550.163.01-5.1550.163.01-6

debian/nvidia-graphics-drivers-legacy-340xx<=340.108-28

debian/nvidia-graphics-drivers-legacy-390xx

390.157-16

debian/nvidia-graphics-drivers-tesla-418<=418.226.00-22

debian/nvidia-graphics-drivers-tesla-450

450.248.02-14

debian/nvidia-graphics-drivers-tesla-460

460.106.00-24

debian/nvidia-graphics-drivers-tesla-470

470.256.02-1~deb12u1470.256.02-10

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade debian/nvidia-graphics-drivers to a version that resolves this vulnerability.
Fixed in 535.261.03-1Fixed in 535.309.01-0+deb12u1Fixed in 550.163.01-2Fixed in 550.163.01-5.1Fixed in 550.163.01-6
Upgrade
Upgrade debian/nvidia-graphics-drivers-legacy-390xx to a version that resolves this vulnerability.
Fixed in 390.157-16
Upgrade
Upgrade debian/nvidia-graphics-drivers-tesla-450 to a version that resolves this vulnerability.
Fixed in 450.248.02-14
Upgrade
Upgrade debian/nvidia-graphics-drivers-tesla-460 to a version that resolves this vulnerability.
Fixed in 460.106.00-24
Upgrade
Upgrade debian/nvidia-graphics-drivers-tesla-470 to a version that resolves this vulnerability.
Fixed in 470.256.02-1~deb12u1Fixed in 470.256.02-10
Upgrade
Upgrade debian/nvidia-graphics-drivers to a version that resolves this vulnerability.
Fixed in 470.141.03-1
Upgrade
Upgrade debian/nvidia-graphics-drivers-tesla-470 to a version that resolves this vulnerability.
Fixed in 470.141.03-1

Event History

Nov 18, 2022

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionSeverityWeakness

Nov 19, 2022

Data Sourced

via OSV·12:15 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is CVE-2022-34665?

CVE-2022-34665 is a vulnerability found in NVIDIA GPU Display Driver for Windows and Linux, which can be exploited by a local user to cause a denial of service.

How severe is CVE-2022-34665?

CVE-2022-34665 has a severity rating of medium, with a CVSS score of 6.5.

What is the affected software for CVE-2022-34665?

The affected software for CVE-2022-34665 includes NVIDIA GPU Display Driver for Windows and Linux.

How can CVE-2022-34665 be exploited?

CVE-2022-34665 can be exploited by a local user with basic capabilities to cause a null-pointer dereference, leading to a denial of service.

Where can I find more information about CVE-2022-34665?

You can find more information about CVE-2022-34665 on the NVIDIA customer help website and the Gentoo Security website.

CVE-2022-34665: Null Pointer Dereference

Affected Software

Remediation

Event History

Frequently Asked Questions

What is CVE-2022-34665?

How severe is CVE-2022-34665?

What is the affected software for CVE-2022-34665?

How can CVE-2022-34665 be exploited?

Where can I find more information about CVE-2022-34665?

Company

Resources

Contact