CVE-2022-34677

HighCVSS 7.1/10Last modified Jun 17, 2026

Description

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where an unprivileged regular user can cause an integer to be truncated, which may lead to denial of service or data tampering.

Metrics

CVSS 3.1 7.1/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Weakness enumeration

CWE-125 CWE-681

Affected software

Vendor	Product	Versions
NVIDIA	vGPU software (guest driver) - Linux, vGPU software (Virtual GPU Manager), NVIDIA Cloud Gaming (guest driver), NVIDIA Cloud Gaming (Virtual GPU Manager)	All versions prior to and including 14.2, 13.4, and 11.9, and all versions prior to the November 2022 release

References

https://lists.debian.org/debian-lts-announce/2023/05/msg00010.htmlMailing List
https://nvidia.custhelp.com/app/answers/detail/a_id/5415Vendor Advisory
https://security.gentoo.org/glsa/202310-02Third Party Advisory
https://lists.debian.org/debian-lts-announce/2023/05/msg00010.htmlMailing List
https://nvidia.custhelp.com/app/answers/detail/a_id/5415Vendor Advisory
https://security.gentoo.org/glsa/202310-02Third Party Advisory

Timeline

Published: Dec 30, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-346785.5NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where an unprivileged user can cause a nu CVE-2022-346795.5NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where an unhandled return value can lead to a CVE-2022-346805.5NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where an integer truncation can lead to an ou CVE-2022-346815.5NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler, where improper input validat CVE-2022-346825.5NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where an unprivileged regular user can cause a null-p CVE-2022-346835.5NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where a nu CVE-2022-346847.1NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko), where an off-by-one error may lead to dat CVE-2022-346855.5Azure RTOS GUIX Studio Information Disclosure Vulnerability CVE-2022-346865.5Azure RTOS GUIX Studio Information Disclosure Vulnerability CVE-2022-346877.8Azure RTOS GUIX Studio Remote Code Execution Vulnerability CVE-2022-346897.5Windows CryptoAPI Spoofing Vulnerability CVE-2022-34694.8The WP Attachments WordPress plugin before 5.0.5 does not sanitize and escapes some of its settings, which could allow high-privilege users