CVE-2022-34674: Debian Linux

Medium severity, CVSS 6.1. EPSS: 0.3% chance of exploitation in the next 30 days.

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where a helper function maps more physical pages than were requested, which may lead to undefined behavior or an information leak.

Affected products

• Debian Debian Linux: version 10.0 only
• NVIDIA Cloud Gaming: before 525.60.12 (fixed in 525.60.12); before 525.60.11 (fixed in 525.60.11)
• NVIDIA GPU Display Driver: from 390, before 390.157 (fixed in 390.157); from 470, before 470.161.03 (fixed in 470.161.03); from 510, before 510.108.03 (fixed in 510.108.03); from 515, before 515.86.01 (fixed in 515.86.01); from 525, before 525.60.11 (fixed in 525.60.11); from 450, before 450.216.04 (fixed in 450.216.04)
• NVIDIA Virtual GPU: before 11.11 (fixed in 11.11); from 12.0, before 13.6 (fixed in 13.6); from 14.0, before 14.4 (fixed in 14.4)

Published 2022-12-30. Last modified 2026-06-17.