NVIDIA GPU Display Driver (nvidia.ko): integer overflow in the kernel mode layer reachable by a local GPU user
Impact
An unprivileged local user with a GPU allocation can trigger an integer overflow inside nvidia.ko and obtain information disclosure, data tampering or a node crash in kernel context. NVIDIA split this across 2 ids (CVE-2022-42257, CVE-2022-42258) in bulletin 5415 with identical wording, CWE-190 and CVSS 5.3, so both describe the same indistinguishable flaw class and the same remediation. Everything with a GPU allocation on the node can reach it, because /dev/nvidia* is handed straight into every GPU container by the container toolkit - there is no additional gate between a tenant workload and the driver ioctl surface.
Who can reach it
Local and unprivileged. The attacker needs only to open /dev/nvidiactl and /dev/nvidia<N> and issue ioctls. On a shared node that is any scheduled tenant pod holding a GPU; no host shell, no root, no CAP_SYS_ADMIN.
What to do
One driver upgrade clears both ids: move to the fixed datacenter driver branch named in NVIDIA bulletin 5415. Cost: nvidia.ko cannot be replaced while a process holds a GPU, so this is cordon + drain + module reload per node - stop persistence mode and nv-hostengine/DCGM first or the unload fails. With the GPU Operator it is a rolling node upgrade. No VBIOS, BMC or SBIOS flash needed.
Also covers 1 CVE
The vendor assigned a separate id to each affected code path. They share this advisory, this score and this fix, so they are one entry here.
References
Related entries
- NVIDIA GPU Display Driver - Linux kernel module (nvidia.ko): A null-pointer dereference in a Linux driver kernelCVE-2025-23332 · NVIDIA GPU Display Driver - Linux kernel module (nvidia.ko)Medium
- NVIDIA GPU Display Driver - Linux kernel module (nvidia.ko): An out-of-bounds array access in nvidia.ko yields denialCVE-2022-34673 · NVIDIA GPU Display Driver - Linux kernel module (nvidia.ko)Medium
- NVIDIA GPU Display Driver - Linux kernel module (nvidia.ko): An integer overflow in nvidia.ko crashes the driverCVE-2022-42259 · NVIDIA GPU Display Driver - Linux kernel module (nvidia.ko)Medium
- NVIDIA GPU Display Driver - Linux kernel module (nvidia.ko): Missing input validation in nvidia.ko lets a basic localCVE-2022-31607 · NVIDIA GPU Display Driver - Linux kernel module (nvidia.ko)High
- NVIDIA GPU Display Driver - Linux kernel module (nvidia.ko): An optional D-Bus configuration file shippedCVE-2022-31608 · NVIDIA GPU Display Driver - Linux kernel module (nvidia.ko)High
- NVIDIA GPU Display Driver - Linux kernel module (nvidia.ko): Truncation when casting to a smaller primitive loses dataCVE-2022-34670 · NVIDIA GPU Display Driver - Linux kernel module (nvidia.ko)High
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.