CVE-2022-34673

What it actually does

Out-of-bounds array access in the nvidia.ko kernel module allows memory corruption that can result in denial of service, information disclosure, or data tampering.

Why it matters to the business

Linux systems using NVIDIA GPUs may experience unexpected crashes, exposure of sensitive data, or unauthorized changes to system state, disrupting operations in data centers, workstations, and AI/ML environments.

How an attack unfolds

An attacker with local access on a vulnerable Linux system interacts with the nvidia.ko driver through user-space interfaces or GPU workloads to trigger an out-of-bounds array access, leading to kernel memory corruption and potential escalation of privileges or data leakage.

How to fix it

Upgrade the NVIDIA GPU Display Driver for Linux to a version that resolves the out-of-bounds access issue; monitor NVIDIA security bulletins for the availability of fixed releases and apply them across all affected systems.

How to confirm the fix worked

Verify the installed nvidia.ko module version against NVIDIA's advisory list of patched releases; test GPU workloads and kernel interactions in a controlled environment to confirm absence of the vulnerability.

Typical attack path

1. Obtain local user access on a target Linux system with an affected NVIDIA GPU driver
2. Craft or execute code that invokes specific GPU-related system calls or APIs targeting the nvidia.ko kernel module
3. Trigger the out-of-bounds array access to corrupt kernel memory
4. Leverage resulting corruption for denial of service, information disclosure, or data tampering

How to detect it

Review kernel logs for nvidia.ko-related errors, crashes, or out-of-bounds access warnings; monitor for unusual GPU process behavior or system instability following driver interactions.

What your security team should do

• Prioritize driver updates on all Linux systems with NVIDIA GPUs, especially those handling sensitive workloads
• Restrict local access and GPU resource permissions where possible until patches are applied
• Include NVIDIA driver version checks in regular vulnerability scanning and asset inventory processes