CVE-2022-34673 Memory corruption in NVIDIA GPU Display Driver for Linux

Medium 4.4 Published 30 Dec 2022 Updated 11 Apr 2025

An out-of-bounds array access in the NVIDIA Linux GPU kernel driver allows attackers to cause denial of service, disclose information, or tamper with data.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Local or same network only
Victim action needed: Not needed
Fix: Available

What is CVE-2022-34673?

CVE-2022-34673 is a medium-severity memory corruption vulnerability in Nvidia Gpu Display Driver, published on 30 Dec 2022. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko), where an out-of-bounds array access may lead to denial of service, information disclosure, or data tampering.

Weakness: CWE-125, CWE-190

Which versions are affected by CVE-2022-34673?

It affects 1 product.

Products include Nvidia Gpu Display Driver.

How do I fix CVE-2022-34673?

Apply the vendor's patch.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2022-34673 being exploited?

There is no known exploitation of CVE-2022-34673 in the wild and no public exploit code.

All Nvidia Gpu Display Driver vulnerabilities

Sources

Also known as DEBIAN-CVE-2022-34673, UBUNTU-CVE-2022-34673.