CVE-2022-34674 in GPU Display Driver

Sumário

de MITRE • 31/12/2022

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where a helper function maps more physical pages than were requested, which may lead to undefined behavior or an information leak.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Responsável: NVIDIA Corporation
• Reservar: 27/06/2022
• Divulgação: 31/12/2022
• Moderação: aceite
• Entrada: VDB-217086
• CPE: pronto
• CWE: CWE-119 (confirmado)
• CVSS: 6.8 (CNA)
• EPSS: 0.00271
• KEV: não
• Atividades: muito baixo
• Sector: Hospital, Agriculture, ...

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2022-34674
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2022-34674
• CVE Details: https://www.cvedetails.com/cve/CVE-2022-34674/