CVE-2022-34675

Severity: medium (CVSS 5.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-12-30 · updated 2026-06-17
Weakness: CWE-476

Description

NVIDIA Display Driver for Linux contains a vulnerability in the Virtual GPU Manager, where it does not check the return value from a null-pointer dereference, which may lead to denial of service.

Affected products

NVIDIA Cloud Gaming: before 525.60.12 — fixed in 525.60.12
NVIDIA Guest driver: from 390 before 390.157; from 470 before 470.161.03; from 510 before 510.108.03; from 515 before 515.86.01; from 525 before 525.60.11; from 450 before 450.216.04 — fixed in 390.157, 470.161.03, 510.108.03, 515.86.01, 525.60.11, 450.216.04

How to fix

Upgrade to a fixed version: NVIDIA Cloud Gaming 525.60.12; NVIDIA Guest driver 390.157, 470.161.03, 510.108.03, 515.86.01. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2022-34675 or the next vulnerability affects your stack