Lucene search

K
ubuntucveUbuntu.comUB:CVE-2022-34674
HistoryDec 30, 2022 - 12:00 a.m.

CVE-2022-34674

2022-12-3000:00:00
ubuntu.com
ubuntu.com
14
nvidia gpu display driver
linux
vulnerability
kernel mode
information leak

6.8 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

0.0004 Low

EPSS

Percentile

14.1%

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel
mode layer handler, where a helper function maps more physical pages than
were requested, which may lead to undefined behavior or an information
leak.

Notes

Author Note
mdeslaur some binary drivers are no longer support by NVidia, so they are marked as ignored here

6.8 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

0.0004 Low

EPSS

Percentile

14.1%