CVE-2022-42257

HIGH 7.3CVE-2022-42257 · Published 30/12/2022 · updated 17/06/2026

In short

CVE-2022-42257 is a HIGH (CVSS 7.3) vulnerability affecting cloud gaming (nvidia), gpu display driver (nvidia), virtual gpu (nvidia).
Chance of exploitation in the next 30 days (EPSS): 0.28%, higher than 20.1% of all vulnerabilities.
Fix: update to 525.60.11, 525.60.12, 390.157, 450.216.04 or later.

Package	Affected versions	Patched versions
cloud gaming nvidia	`< 525.60.11< 525.60.12`	`525.60.11525.60.12`
gpu display driver nvidia	`≥ 390, < 390.157≥ 450, < 450.216.04≥ 470, < 470.161.03≥ 510, < 510.108.03≥ 515, < 515.86.01≥ 525, < 525.60.11`	`390.157450.216.04470.161.03510.108.03515.86.01525.60.11`
virtual gpu nvidia	`≥ 12.0, < 13.6≥ 14.0, < 14.4< 11.11`	`13.614.411.11`

Description

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko), where an integer overflow may lead to information disclosure, data tampering or denial of service.

References

lists.debian.org/debian-lts-announce/2023/05/msg00010.html · Mailing List
nvidia.custhelp.com/app/answers/detail/a_id/5415 · Vendor Advisory
security.gentoo.org/glsa/202310-02 · Third Party Advisory

More vulnerabilities in cloud gaming

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

cloud gaming

nvidia

< 525.60.11< 525.60.12

525.60.11525.60.12

gpu display driver

nvidia

≥ 390, < 390.157≥ 450, < 450.216.04≥ 470, < 470.161.03≥ 510, < 510.108.03≥ 515, < 515.86.01≥ 525, < 525.60.11

390.157450.216.04470.161.03510.108.03515.86.01525.60.11

virtual gpu

nvidia

≥ 12.0, < 13.6≥ 14.0, < 14.4< 11.11

13.614.411.11

More vulnerabilities in cloud gaming

See all →