CVE-2022-34684

What it actually does

An off-by-one error in the kernel mode layer (nvidia.ko) of the NVIDIA GPU Display Driver for Linux permits out-of-bounds memory access, resulting in data tampering or information disclosure.

Why it matters to the business

Local attackers may read sensitive information or alter system data on Linux systems with NVIDIA GPUs, raising the risk of data exposure or integrity issues across many deployments.

How an attack unfolds

A local attacker with standard user privileges crafts operations against the vulnerable nvidia.ko module to trigger the off-by-one error and achieve memory-adjacent reads or writes.

How to fix it

Upgrade to the fixed package versions for each distribution: sysstat 12.6.1-1 on Debian 12 and 13, 93c8e59b4cbfc3c848a94784fa1a249ca7c426c0 in GIT, 12.2.0-2ubuntu0.2 on Ubuntu 20.04 LTS, 12.5.2-2ubuntu0.1 on Ubuntu 22.04 LTS, 11.6.1-1ubuntu0.2 on Ubuntu 18.04 LTS, 10.2.0-1ubuntu0.1~esm1 on Ubuntu Pro 14.04 LTS, and 11.2.0-1ubuntu0.3+esm1 on Ubuntu Pro 16.04 LTS.

How to confirm the fix worked

Verify installed package versions match or exceed the listed fixed releases and confirm absence of the vulnerable driver module behavior through standard package and kernel module checks.

Typical attack path

1. Obtain local user access on an affected Linux system
2. Interact with the NVIDIA kernel driver module
3. Trigger the off-by-one condition through crafted GPU-related calls
4. Read or modify adjacent memory regions

How to detect it

Review system and kernel logs for unusual nvidia.ko activity or memory errors; no widespread exploitation indicators are known given low EPSS and absence from KEV.

What your security team should do

• Apply the listed fixed package versions immediately on all affected systems
• Prioritize updates on internet-facing or multi-user Linux hosts with NVIDIA hardware
• Monitor EPSS trend and reassess exploit maturity