CVE-2022-42254: NVIDIA Cloud Gaming

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko), where an out-of-bounds array access may lead to denial of service, data tampering, or information disclosure.

Affected products

  • NVIDIA Cloud Gaming: before 525.60.11 (fixed in 525.60.11); before 525.60.12 (fixed in 525.60.12)
  • NVIDIA GPU Display Driver: from 470, before 470.161.03 (fixed in 470.161.03); from 510, before 510.108.03 (fixed in 510.108.03); from 515, before 515.86.01 (fixed in 515.86.01)
  • NVIDIA Virtual GPU: before 11.11 (fixed in 11.11); from 12.0, before 13.6 (fixed in 13.6); from 14.0, before 14.4 (fixed in 14.4)

Published 2022-12-30. Last modified 2026-06-17.