CVE-2022-42264: 
Bottlerocket vulnerability analysis and mitigation

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (CVE-2022-42264), where an unprivileged regular user can cause the use of an out-of-range pointer offset. The vulnerability was discovered and disclosed in October 2022, affecting multiple NVIDIA GPU Display Driver versions across different branches (NVIDIA Bulletin).

The vulnerability is classified with a CVSS v3.1 base score of 7.1 (CWE-823), indicating a high severity issue. The vulnerability exists in the kernel mode layer of the NVIDIA GPU Display Driver for Linux, specifically involving an out-of-range pointer offset that can be triggered by an unprivileged regular user (NVIDIA Bulletin).

If exploited, this vulnerability can lead to multiple serious consequences including data tampering, data loss, information disclosure, or denial of service. The vulnerability affects the system's kernel mode layer, potentially compromising system security (NVIDIA Bulletin, CVE Mitre).

NVIDIA has released security updates to address this vulnerability across multiple driver branches. For Linux systems, updated versions include R525 (525.60.11), R515 (515.86.01), R510 (510.108.03), R470 (470.161.03), and R450 (450.216.04). Users are advised to update to these or later versions (NVIDIA Bulletin, Gentoo Security).