CVE-2022-34676
First published: Fri Dec 30 2022(Updated: )
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where an out-of-bounds read may lead to denial of service, information disclosure, or data tampering.
Credit: psirt@nvidia.com psirt@nvidia.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| NVIDIA Virtual GPU | <11.11 | |
| NVIDIA Virtual GPU | >=12.0<13.6 | |
| NVIDIA Virtual GPU | >=14.0<14.4 | |
| Citrix Hypervisor | ||
| Linux Linux kernel | ||
| Redhat Enterprise Linux Kernel-based Virtual Machine | ||
| VMware vSphere | ||
| Nvidia Cloud Gaming | <525.60.11 | |
| Nvidia Cloud Gaming | <525.60.12 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2022-34676?
CVE-2022-34676 is a vulnerability in the NVIDIA GPU Display Driver for Linux where an out-of-bounds read may lead to denial of service, information disclosure, or data tampering.
What is the severity of CVE-2022-34676?
CVE-2022-34676 has a severity value of 7.8, which is classified as high.
Which software versions are affected by CVE-2022-34676?
Nvidia Virtual Gpu versions up to and excluding 11.11, Nvidia Virtual Gpu versions between 12.0 and 13.6 (exclusive), and Nvidia Virtual Gpu versions between 14.0 and 14.4 (exclusive) are affected.
How can CVE-2022-34676 be exploited?
CVE-2022-34676 can be exploited by causing an out-of-bounds read in the kernel mode layer handler of the NVIDIA GPU Display Driver for Linux.
Where can I find more information about CVE-2022-34676?
You can find more information about CVE-2022-34676 on the NVIDIA customer support website and the Gentoo security advisory.
- collector/nvd-api
- collector/nvd-index
- agent/weakness
- agent/type
- agent/event
- agent/references
- agent/severity
- agent/author
- agent/description
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/nvidia
- canonical/nvidia virtual gpu
- version/nvidia virtual gpu/12.0
- version/nvidia virtual gpu/14.0
- vendor/citrix
- canonical/citrix hypervisor
- vendor/linux
- canonical/linux linux kernel
- vendor/redhat
- canonical/redhat enterprise linux kernel-based virtual machine
- vendor/vmware
- canonical/vmware vsphere
- canonical/nvidia cloud gaming