CVE-2022-42263 Integer overflow in vGPU software (guest driver) - Linux, vGPU software (Virtual GPU Manager), NVIDIA Cloud Gaming (guest driver), NVIDIA Cloud Gaming (Virtual GPU Manager)

High 7.1 Published Updated

An integer overflow in the NVIDIA GPU Display Driver kernel mode layer allows attackers to cause denial of service or disclose information.

Exploited in the wild
Not known
Login needed
Any signed-in user
Attackable
Local or same network only
Victim action needed
Not needed
Fix
Available

What is CVE-2022-42263?

CVE-2022-42263 is a high-severity vulnerability in Nvidia Gpu Display Driver, published on 30 Dec 2022. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where an Integer overflow may lead to denial of service or information disclosure.

Weakness: CWE-190

Which versions are affected by CVE-2022-42263?

It affects 3 products.

Products include Nvidia Cloud Gaming, Nvidia Gpu Display Driver, Nvidia Virtual Gpu.

How do I fix CVE-2022-42263?

Apply the vendor's patch.

Is CVE-2022-42263 being exploited?

There is no known exploitation of CVE-2022-42263 in the wild and no public exploit code.

All Nvidia Gpu Display Driver vulnerabilities

Sources

Also known as DEBIAN-CVE-2022-42263, UBUNTU-CVE-2022-42263.

Is CVE-2022-42263 in your software?

Upload an SBOM and sbomify checks it against every vulnerability here, every day.

Check your SBOMs for free