CVE-2022-42257: Integer Overflow
Published Dec 30, 2022
·Updated
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko), where an integer overflow may lead to information disclosure, data tampering or denial of service.
Affected Software
21 affected components
Nvidia Gpu Display Driver Linux>=390<390.157
Nvidia Gpu Display Driver Linux>=470<470.161.03
Nvidia Gpu Display Driver Linux>=510<510.108.03
Nvidia Gpu Display Driver Linux>=515<515.86.01
Nvidia Gpu Display Driver Linux>=525<525.60.11
Nvidia Geforce
Nvidia Nvs
Nvidia Quadro
Nvidia Rtx
Nvidia Gpu Display Driver Linux>=450<450.216.04
Nvidia Tesla
Nvidia Cloud Gaming<525.60.12
Citrix Hypervisor
redhat Enterprise Linux Kernel-based Virtual Machine
Nvidia Virtual GPU<11.11
Nvidia Virtual GPU>=12.0<13.6
Nvidia Virtual GPU>=14.0<14.4
Linux Linux kernel
VMware vSphere
Nvidia Cloud Gaming<525.60.11
Debian Debian Linux=10.0
Event History
Dec 30, 2022
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is CVE-2022-42257?
CVE-2022-42257 is a vulnerability in the NVIDIA GPU Display Driver for Linux that may lead to information disclosure, data tampering, or denial of service.
2
Which software is affected by CVE-2022-42257?
The NVIDIA GPU Display Driver for Linux versions 390 and above are affected by CVE-2022-42257.
3
How severe is CVE-2022-42257?
CVE-2022-42257 has a severity rating of 7.3, which is considered high.
4
How can CVE-2022-42257 be fixed?
To fix CVE-2022-42257, users should update to the latest version of the NVIDIA GPU Display Driver for Linux.
5
Where can I find more information about CVE-2022-42257?
More information about CVE-2022-42257 can be found in the references provided.