CVE-2022-42256

Public on 2022-12-13
Modified on 2023-01-18
Description
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko), where an integer overflow in index validation may lead to denial of service, information disclosure, or data tampering.
Severity
Medium severity
Medium
CVSS v3 Base Score
5.3
See breakdown

Affected Packages

Platform Package Release Date Advisory Status
Amazon Linux 1 nvidia Pending Fix
Amazon Linux 2 - Core nvidia Pending Fix

CVSS Scores

Score Type Score Vector
Amazon Linux CVSSv3 5.3 AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
NVD CVSSv3 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L