High WID-SEC-2022-2205 30 CVEs

Nvidia Treiber: Mehrere Schwachstellen

Published Nov 30, 2022 · Updated Aug 23, 2026 · Revision 11 · de-DE

Vendor: Debian Vendor: Dell Vendor: gentoo Vendor: HP Vendor: Lenovo Vendor: NVIDIA Vendor: Xerox Product: Computer Product: Computer Product: Computer Product: FreeFlow Print Server Product: Linux Product: Linux Product: Treiber

Summary

Ein lokaler Angreifer kann mehrere Schwachstellen im Nvidia Treiber ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, einen Denial-of-Service-Zustand auszulösen, seine Privilegien zu erweitern und Daten zu manipulieren.

Product

NVidia ist ein Hersteller von Grafikkarten.

Vulnerabilities 30

High 8.8

CVE-2022-34669

NVIDIA GPU Display Driver for Windows contains a vulnerability in the user mode layer, where an unprivileged regular us…

NVIDIA vGPU software (guest driver) - Windows, NVIDIA Cloud Gaming (guest driver) Windows

Dec 30, 2022
High 8.5

CVE-2022-34671

NVIDIA GPU Display Driver for Windows contains a vulnerability in the user-mode layer, where an unprivileged user can c…

NVIDIA NVIDIA GPU Display Driver for Windows Windows

Dec 30, 2022
High 7.8

CVE-2022-34670

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where an unprivileged re…

NVIDIA vGPU software (guest driver) - Linux, vGPU software (Virtual GPU Manager), NVIDIA Cloud Gaming (guest driver), NVIDIA Cloud Gaming (Virtual GPU Manager) nvidia-graphics-drivers-304 nvidia-graphics-drivers-340 Linux Debian Ubuntu

Dec 30, 2022
High 7.8

CVE-2022-34672

NVIDIA Control Panel for Windows contains a vulnerability where an unauthorized user or an unprivileged regular user ca…

NVIDIA vGPU software (guest driver) - Windows, NVIDIA Cloud Gaming (guest driver) Windows

Dec 30, 2022
High 7.8

CVE-2022-42260

NVIDIA vGPU Display Driver for Linux guest contains a vulnerability in a D-Bus configuration file, where an unauthorize…

NVIDIA vGPU software (guest driver) - Linux, NVIDIA Cloud Gaming (guest driver) nvidia-graphics-drivers-304 nvidia-graphics-drivers-340 Linux Debian Ubuntu

Dec 30, 2022
High 7.8

CVE-2022-42261

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where an input index is not val…

NVIDIA vGPU software (Virtual GPU Manager), NVIDIA Cloud Gaming (Virtual GPU Manager) nvidia-graphics-drivers-304 nvidia-graphics-drivers-340 Debian Ubuntu

Dec 30, 2022
High 7.1

CVE-2022-34676

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where an out-of-bounds r…

NVIDIA vGPU software (guest driver) - Linux, vGPU software (Virtual GPU Manager), NVIDIA Cloud Gaming (guest driver), NVIDIA Cloud Gaming (Virtual GPU Manager) nvidia-graphics-drivers-304 nvidia-graphics-drivers-340 Linux Ubuntu

Dec 30, 2022
High 7.1

CVE-2022-42262

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where an input index is not val…

NVIDIA vGPU software (Virtual GPU Manager), NVIDIA Cloud Gaming (Virtual GPU Manager) nvidia-graphics-drivers-304 nvidia-graphics-drivers-340 Debian Ubuntu

Dec 30, 2022
High 7.1

CVE-2022-42263

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where an Integer overflo…

NVIDIA vGPU software (guest driver) - Linux, vGPU software (Virtual GPU Manager), NVIDIA Cloud Gaming (guest driver), NVIDIA Cloud Gaming (Virtual GPU Manager) nvidia-graphics-drivers-304 nvidia-graphics-drivers-340 Linux Debian Ubuntu

Dec 30, 2022
High 7.1

CVE-2022-42264

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where an unprivileged regular us…

NVIDIA vGPU software (guest driver) - Linux, vGPU software (Virtual GPU Manager), NVIDIA Cloud Gaming (guest driver), NVIDIA Cloud Gaming (Virtual GPU Manager) nvidia-graphics-drivers-304 nvidia-graphics-drivers-340 Linux Debian Ubuntu

Dec 30, 2022
High 7.0

CVE-2022-42267

NVIDIA GPU Display Driver for Windows contains a vulnerability where a regular user can cause an out-of-bounds read, wh…

NVIDIA NVIDIA GPU Display Driver for Windows Windows

Dec 30, 2022
Medium 6.8

CVE-2022-34674

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where a helper function …

NVIDIA vGPU software (guest driver) - Linux, vGPU software (Virtual GPU Manager), NVIDIA Cloud Gaming (guest driver), NVIDIA Cloud Gaming (Virtual GPU Manager) nvidia-graphics-drivers-304 nvidia-graphics-drivers-340 Linux Debian Ubuntu

Dec 30, 2022
Medium 6.5

CVE-2022-34678

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where an unprivilege…

NVIDIA vGPU software (guest driver) - Windows, Linux and vGPU software (Virtual GPU Manager), NVIDIA Cloud Gaming (guest driver), NVIDIA Cloud Gaming (guest driver), NVIDIA Cloud Gaming (Virtual GP nvidia-graphics-drivers-304 nvidia-graphics-drivers-340 Linux Windows Ubuntu

Dec 30, 2022
Medium 5.5

CVE-2022-34675

NVIDIA Display Driver for Linux contains a vulnerability in the Virtual GPU Manager, where it does not check the return…

NVIDIA vGPU software (Virtual GPU Manager), NVIDIA Cloud Gaming (Virtual GPU Manager) nvidia-graphics-drivers-304 nvidia-graphics-drivers-340 Debian Ubuntu

Dec 30, 2022
Medium 5.5

CVE-2022-34677

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where an unprivileged re…

NVIDIA vGPU software (guest driver) - Linux, vGPU software (Virtual GPU Manager), NVIDIA Cloud Gaming (guest driver), NVIDIA Cloud Gaming (Virtual GPU Manager) nvidia-graphics-drivers-304 nvidia-graphics-drivers-340 Linux Debian Ubuntu

Dec 30, 2022
Medium 5.5

CVE-2022-34679

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where an unhandled retur…

NVIDIA vGPU software (guest driver) - Linux, vGPU software (Virtual GPU Manager), NVIDIA Cloud Gaming (guest driver), NVIDIA Cloud Gaming (Virtual GPU Manager) nvidia-graphics-drivers-304 nvidia-graphics-drivers-340 Linux Debian Ubuntu

Dec 30, 2022
Medium 5.5

CVE-2022-34680

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where an integer truncat…

NVIDIA vGPU software (guest driver) - Linux, vGPU software (Virtual GPU Manager), NVIDIA Cloud Gaming (guest driver), NVIDIA Cloud Gaming (Virtual GPU Manager) nvidia-graphics-drivers-304 nvidia-graphics-drivers-340 Linux Debian Ubuntu

Dec 30, 2022
Medium 5.5

CVE-2022-34681

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler, where i…

NVIDIA vGPU software (guest driver) - Windows, NVIDIA Cloud Gaming (guest driver) Windows

Dec 30, 2022
Medium 5.5

CVE-2022-34682

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where an unprivileged regular us…

NVIDIA vGPU software (guest driver) - Linux, vGPU software (Virtual GPU Manager), NVIDIA Cloud Gaming (guest driver), NVIDIA Cloud Gaming (Virtual GPU Manager) nvidia-graphics-drivers-304 nvidia-graphics-drivers-340 Linux Debian Ubuntu

Dec 30, 2022
Medium 5.5

CVE-2022-34683 Public exploit

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for Dxgk…

NVIDIA vGPU software (guest driver) - Windows, NVIDIA Cloud Gaming (guest driver) Windows

Dec 30, 2022
Medium 5.5

CVE-2022-42266

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for Dxgk…

NVIDIA vGPU software (guest driver) - Windows, NVIDIA Cloud Gaming (guest driver) Windows

Dec 30, 2022
Medium 5.3

CVE-2022-34684

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko), where an off-by-one …

NVIDIA vGPU software (guest driver) - Linux, vGPU software (Virtual GPU Manager), NVIDIA Cloud Gaming (guest driver), NVIDIA Cloud Gaming (Virtual GPU Manager) nvidia-graphics-drivers-304 nvidia-graphics-drivers-340 Linux Debian Ubuntu

Dec 30, 2022
Medium 5.3

CVE-2022-42254

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko), where an out-of-boun…

NVIDIA vGPU software (guest driver) - Linux, vGPU software (Virtual GPU Manager), NVIDIA Cloud Gaming (guest driver), NVIDIA Cloud Gaming (Virtual GPU Manager) nvidia-graphics-drivers-304 nvidia-graphics-drivers-340 Linux Debian Ubuntu

Dec 30, 2022
Medium 5.3

CVE-2022-42255

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko), where an out-of-boun…

NVIDIA vGPU software (guest driver) - Linux, vGPU software (Virtual GPU Manager), NVIDIA Cloud Gaming (guest driver), NVIDIA Cloud Gaming (Virtual GPU Manager) nvidia-graphics-drivers-304 nvidia-graphics-drivers-340 Linux Debian Ubuntu

Dec 30, 2022
Medium 5.3

CVE-2022-42256

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko), where an integer ove…

NVIDIA vGPU software (guest driver) - Linux, vGPU software (Virtual GPU Manager), NVIDIA Cloud Gaming (guest driver), NVIDIA Cloud Gaming (Virtual GPU Manager) nvidia-graphics-drivers-304 nvidia-graphics-drivers-340 Linux Debian Ubuntu

Dec 30, 2022
Medium 5.3

CVE-2022-42257

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko), where an integer ove…

NVIDIA vGPU software (guest driver) - Linux, vGPU software (Virtual GPU Manager), NVIDIA Cloud Gaming (guest driver), NVIDIA Cloud Gaming (Virtual GPU Manager) nvidia-graphics-drivers-304 nvidia-graphics-drivers-340 Linux Debian Ubuntu

Dec 30, 2022
Medium 5.3

CVE-2022-42258

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko), where an integer ove…

NVIDIA vGPU software (guest driver) - Linux, vGPU software (Virtual GPU Manager), NVIDIA Cloud Gaming (guest driver), NVIDIA Cloud Gaming (Virtual GPU Manager) nvidia-graphics-drivers-304 nvidia-graphics-drivers-340 Linux Debian Ubuntu

Dec 30, 2022
Medium 5.3

CVE-2022-42265

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko), where an integer ove…

NVIDIA NVIDIA GPU Display Driver for Linux nvidia-graphics-drivers-304 nvidia-graphics-drivers-340 Linux Debian Ubuntu

Dec 30, 2022
Medium 4.4

CVE-2022-34673

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko), where an out-of-boun…

NVIDIA NVIDIA GPU Display Driver for Linux nvidia-graphics-drivers-304 nvidia-graphics-drivers-340 Linux Debian Ubuntu

Dec 30, 2022
Medium 4.4

CVE-2022-42259

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko), where an integer ove…

NVIDIA vGPU software (guest driver) - Linux, vGPU software (Virtual GPU Manager), NVIDIA Cloud Gaming (guest driver), NVIDIA Cloud Gaming (Virtual GPU Manager) nvidia-graphics-drivers-304 nvidia-graphics-drivers-340 Linux Debian Ubuntu

Dec 30, 2022

Revision history

2026-08-23 #11
Neue Updates von Debian aufgenommen
2024-03-12 #10
Neue Updates von LENOVO aufgenommen
2024-03-03 #9
Neue Updates von XEROX aufgenommen
2023-10-03 #8
Neue Updates von Gentoo aufgenommen
2023-09-11 #7
Neue Updates von HP aufgenommen
2023-07-11 #6
Neue Updates von LENOVO aufgenommen
2023-05-11 #5
Neue Updates von Debian aufgenommen
2023-04-02 #4
Neue Updates von Dell aufgenommen
2023-01-22 #3
Neue Updates von HP aufgenommen
2023-01-01 #2
CVE-2022-42267 ergänzt
2022-11-30 #1
Initiale Fassung

References

Security Bulletin: NVIDIA GPU Display Driver - November 2022 vom 2022-11-30
https://nvidia.custhelp.com/app/answers/detail/a_id/5415
HP Security Bulletin HPSBHF03832 vom 2023-01-21
https://support.hp.com/us-en/document/ish_7564022-7564052-16/HPSBHF03832
Dell Security Advisory DSA-2022-324
https://www.dell.com/support/kbdoc/de-de/000205722/dsa-2022-324
Debian Security Advisory DLA-3418 vom 2023-05-11
https://lists.debian.org/debian-lts-announce/2023/05/msg00010.html
Lenovo Security Advisory LEN-129488 vom 2023-07-11
https://support.lenovo.com/us/en/product_security/ps500566-nvidia-display-driver-advisory-june-2023
HP Security Bulletin HPSBHF03867 vom 2023-09-12
https://support.hp.com/us-en/document/ish_9209725-9209750-16/HPSBHF03867
Gentoo Linux Security Advisory GLSA-202310-02 vom 2023-10-03
https://security.gentoo.org/glsa/202310-02
XEROX Security Advisory XRX24-005 vom 2024-03-04
https://security.business.xerox.com/wp-content/uploads/2024/03/Xerox-Security-Bulletin-XRX24-005-Xerox-FreeFlow%C2%AE-Print-Server-v9_Feb-2024.pdf
XEROX Security Advisory XRX24-004 vom 2024-03-04
https://security.business.xerox.com/wp-content/uploads/2024/03/Xerox%C2%AE-Security-Bulletin-XRX24-004-Xerox%C2%AE-FreeFlow%C2%AE-Print-Server-v7.pdf
Lenovo Security Advisory LEN-150808 vom 2024-03-13
https://support.lenovo.com/us/en/product_security/LEN-150808
Debian Security Advisory DLA-4752 vom 2026-08-24
https://lists.debian.org/debian-lts-announce/2026/08/msg00044.html