CVE-2022-34675: Null Pointer Dereference
NVIDIA Display Driver for Linux contains a vulnerability in the Virtual GPU Manager, where it does not check the return value from a null-pointer dereference, which may lead to denial of service.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/nvidia-graphics-driversto a version that resolves this vulnerability.Fixed in 535.261.03-1Fixed in 535.309.01-0+deb12u1Fixed in 550.163.01-2Fixed in 550.163.01-5.1Fixed in 550.163.01-6 - Upgrade
Upgrade
debian/nvidia-graphics-drivers-legacy-390xxto a version that resolves this vulnerability.Fixed in 390.157-16 - Upgrade
Upgrade
debian/nvidia-graphics-drivers-teslato a version that resolves this vulnerability.Fixed in 525.147.05-15~deb12u1Fixed in 525.147.05-19 - Upgrade
Upgrade
debian/nvidia-graphics-drivers-tesla-450to a version that resolves this vulnerability.Fixed in 450.248.02-14 - Upgrade
Upgrade
debian/nvidia-graphics-drivers-tesla-460to a version that resolves this vulnerability.Fixed in 460.106.00-24 - Upgrade
Upgrade
debian/nvidia-graphics-drivers-tesla-470to a version that resolves this vulnerability.Fixed in 470.256.02-1~deb12u1Fixed in 470.256.02-10 - Upgrade
Upgrade
debian/nvidia-open-gpu-kernel-modulesto a version that resolves this vulnerability.Fixed in 535.261.03-1Fixed in 550.163.01-2Fixed in 550.163.01-4.1 - Upgrade
Upgrade
debian/nvidia-graphics-driversto a version that resolves this vulnerability.Fixed in 510.108.03-1 - Upgrade
Upgrade
debian/nvidia-graphics-drivers-teslato a version that resolves this vulnerability.Fixed in 510.108.03-1 - Upgrade
Upgrade
debian/nvidia-graphics-drivers-tesla-470to a version that resolves this vulnerability.Fixed in 470.161.03-1 - Upgrade
Upgrade
debian/nvidia-open-gpu-kernel-modulesto a version that resolves this vulnerability.Fixed in 515.86.01-1
Event History
Frequently Asked Questions
What is CVE-2022-34675?
CVE-2022-34675 is a vulnerability in the NVIDIA Display Driver for Linux that can lead to denial of service.
Which software products are affected by CVE-2022-34675?
NVIDIA Gpu Display Driver versions 390.x, 470.x, 510.x, and 515.x for Linux are affected by CVE-2022-34675.
What is the severity of CVE-2022-34675?
CVE-2022-34675 has a severity level of medium (5.5).
How can I fix CVE-2022-34675?
To fix CVE-2022-34675, update your NVIDIA Display Driver for Linux to a version that is not affected.
Where can I find more information about CVE-2022-34675?
You can find more information about CVE-2022-34675 in the references provided: [link 1](https://lists.debian.org/debian-lts-announce/2023/05/msg00010.html) and [link 2](https://nvidia.custhelp.com/app/answers/detail/a_id/5415).