CVE-2022-42256: Integer Overflow
First published: Fri Dec 30 2022(Updated: )
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko), where an integer overflow in index validation may lead to denial of service, information disclosure, or data tampering.
Credit: psirt@nvidia.com psirt@nvidia.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| NVIDIA Virtual GPU | <11.11 | |
| NVIDIA Virtual GPU | >=12.0<13.6 | |
| NVIDIA Virtual GPU | >=14.0<14.4 | |
| Citrix Hypervisor | ||
| Linux Linux kernel | ||
| Redhat Enterprise Linux Kernel-based Virtual Machine | ||
| VMware vSphere | ||
| Nvidia Cloud Gaming | <525.60.11 | |
| Nvidia Cloud Gaming | <525.60.12 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2022-42256?
CVE-2022-42256 is a vulnerability in the NVIDIA GPU Display Driver for Linux that can lead to denial of service, information disclosure, or data tampering.
What is the severity of CVE-2022-42256?
The severity of CVE-2022-42256 is high, with a score of 7.8.
Which software is affected by CVE-2022-42256?
NVIDIA Virtual GPU versions up to 11.11, versions between 12.0 and 13.6, and versions between 14.0 and 14.4 are affected by CVE-2022-42256.
How can CVE-2022-42256 be exploited?
CVE-2022-42256 can be exploited through an integer overflow in the index validation of the NVIDIA GPU Display Driver for Linux's kernel mode layer (nvidia.ko).
Are Citrix Hypervisor, Linux Linux kernel, Redhat Enterprise Linux Kernel-based Virtual Machine, and VMware Vsphere affected by CVE-2022-42256?
No, Citrix Hypervisor, Linux Linux kernel, Redhat Enterprise Linux Kernel-based Virtual Machine, and VMware Vsphere are not affected by CVE-2022-42256.
- collector/nvd-api
- collector/nvd-index
- agent/severity
- agent/weakness
- agent/references
- agent/author
- agent/softwarecombine
- agent/last-modified-date
- agent/description
- agent/first-publish-date
- agent/event
- agent/type
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/nvidia
- canonical/nvidia virtual gpu
- version/nvidia virtual gpu/12.0
- version/nvidia virtual gpu/14.0
- vendor/citrix
- canonical/citrix hypervisor
- vendor/linux
- canonical/linux linux kernel
- vendor/redhat
- canonical/redhat enterprise linux kernel-based virtual machine
- vendor/vmware
- canonical/vmware vsphere
- canonical/nvidia cloud gaming