CVE-2022-34682: Null Pointer Dereference
Published Dec 30, 2022
·Updated
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where an unprivileged regular user can cause a null-pointer dereference, which may lead to denial of service.
Affected Software
23 affected componentsFixes available
Nvidia Virtual GPU<11.11
Nvidia Virtual GPU>=12.0<13.6
Nvidia Virtual GPU>=14.0<14.4
Citrix Hypervisor
Linux Linux kernel
redhat Enterprise Linux Kernel-based Virtual Machine
VMware vSphere
Nvidia Cloud Gaming<525.60.11
Nvidia Cloud Gaming<525.60.12
debian/nvidia-graphics-drivers<510.108.03-1
510.108.03-1
debian/nvidia-graphics-drivers<510.108.03-1
510.108.03-1
debian/nvidia-graphics-drivers<510.108.03-1
510.108.03-1
debian/nvidia-graphics-drivers-tesla<510.108.03-1
510.108.03-1
debian/nvidia-graphics-drivers-tesla-470<470.161.03-1
470.161.03-1
debian/nvidia-open-gpu-kernel-modules<515.86.01-1
515.86.01-1
debian/nvidia-open-gpu-kernel-modules<515.86.01-1
515.86.01-1
debian/nvidia-graphics-drivers
535.261.03-1535.309.01-0+deb12u1550.163.01-2550.163.01-5.1550.163.01-6
debian/nvidia-graphics-drivers-tesla
525.147.05-15~deb12u1525.147.05-19
debian/nvidia-graphics-drivers-tesla-418<=418.226.00-22
debian/nvidia-graphics-drivers-tesla-450
450.248.02-14
debian/nvidia-graphics-drivers-tesla-460
460.106.00-24
debian/nvidia-graphics-drivers-tesla-470
470.256.02-1~deb12u1470.256.02-10
debian/nvidia-open-gpu-kernel-modules
535.261.03-1550.163.01-2550.163.01-4.1
Event History
Dec 30, 2022
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverityWeakness
Data Sourced
via OSV·11:15 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the vulnerability ID for this NVIDIA GPU Display Driver for Linux vulnerability?
The vulnerability ID for this NVIDIA GPU Display Driver for Linux vulnerability is CVE-2022-34682.
2
What is the description of the vulnerability?
The vulnerability in the NVIDIA GPU Display Driver for Linux allows an unprivileged user to cause a null-pointer dereference, leading to a denial of service.
3
What software versions are affected by this vulnerability?
Versions 11.11, 12.0 to 13.6 (exclusive), and 14.0 to 14.4 (exclusive) of the Nvidia Virtual Gpu software are affected.
4
What is the severity level of this vulnerability?
The severity level of this vulnerability is medium with a CVSS score of 5.5.
5
How can I fix this vulnerability?
To fix this vulnerability, update your Nvidia Virtual Gpu software to a version higher than 14.4.