Medium: cuda-compiler-12-9

Issue Overview: NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a failure to check the length of a buffer could allow a user to cause the tool to crash or execute arbitrary code by passing in a malformed ELF file. A successful exploit of this...

Medium: cuda-cuxxfilt-12-9

Issue Overview: NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a failure to check the length of a buffer could allow a user to cause the tool to crash or execute arbitrary code by passing in a malformed ELF file. A successful exploit of this...

Amazon Linux 2023 : cuda-nvdisasm-12 (ALAS2023NVIDIA-2025-104)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023NVIDIA-2025-104 advisory. NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a failure to check the length of a buffer could allow a user to cause the tool to crash or execute...

Amazon Linux 2023 : cuda (ALAS2023NVIDIA-2025-090)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023NVIDIA-2025-090 advisory. NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a failure to check the length of a buffer could allow a user to cause the tool to crash or execute...

Amazon Linux 2023 : cuda-minimal-build-12 (ALAS2023NVIDIA-2025-108)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023NVIDIA-2025-108 advisory. NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a failure to check the length of a buffer could allow a user to cause the tool to crash or execute...

Amazon Linux 2023 : nsight-systems (ALAS2023NVIDIA-2025-076)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023NVIDIA-2025-076 advisory. NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a failure to check the length of a buffer could allow a user to cause the tool to crash or execute...

Amazon Linux 2023 : cuda-nvprune-12 (ALAS2023NVIDIA-2025-101)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023NVIDIA-2025-101 advisory. NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a failure to check the length of a buffer could allow a user to cause the tool to crash or execute...

Amazon Linux 2023 : libnvjitlink-12, libnvjitlink-devel-12 (ALAS2023NVIDIA-2025-079)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023NVIDIA-2025-079 advisory. NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a failure to check the length of a buffer could allow a user to cause the tool to crash or execute...

Amazon Linux 2023 : cuda-nsight-systems-12 (ALAS2023NVIDIA-2025-105)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023NVIDIA-2025-105 advisory. NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a failure to check the length of a buffer could allow a user to cause the tool to crash or execute...

Amazon Linux 2023 : nvidia, nvidia-fs (ALAS2023NVIDIA-2025-075)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023NVIDIA-2025-075 advisory. NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a failure to check the length of a buffer could allow a user to cause the tool to crash or execute...

Amazon Linux 2023 : cuda-sandbox-devel-12 (ALAS2023NVIDIA-2025-094)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023NVIDIA-2025-094 advisory. NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a failure to check the length of a buffer could allow a user to cause the tool to crash or execute...

Amazon Linux 2023 : libcufft-12, libcufft-devel-12 (ALAS2023NVIDIA-2025-085)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023NVIDIA-2025-085 advisory. NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a failure to check the length of a buffer could allow a user to cause the tool to crash or execute...

Amazon Linux 2023 : cuda-12 (ALAS2023NVIDIA-2025-123)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023NVIDIA-2025-123 advisory. NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a failure to check the length of a buffer could allow a user to cause the tool to crash or execute...

Amazon Linux 2023 : cuda-cuxxfilt-12 (ALAS2023NVIDIA-2025-114)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023NVIDIA-2025-114 advisory. NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a failure to check the length of a buffer could allow a user to cause the tool to crash or execute...

Important: kernel-livepatch-6.1.131-143.221

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: fix potential memory corruption in nvmetcprecvpdu CVE-2025-21927 In the Linux kernel, the following vulnerability has been resolved: ext4: fix OOB read when checking dotdot dir CVE-2025-37785 Affected...

Important: kernel-livepatch-6.12.20-23.97

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: ext4: fix OOB read when checking dotdot dir CVE-2025-37785 Affected Packages: kernel-livepatch-6.12.20-23.97 Issue Correction: Please ensure you have live patching enabled. Run dnf update...

Medium: libcufft-12-9

Issue Overview: NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a failure to check the length of a buffer could allow a user to cause the tool to crash or execute arbitrary code by passing in a malformed ELF file. A successful exploit of this...

Important: glibc

Issue Overview: Untrusted LDLIBRARYPATH environment variable vulnerability in the GNU C Library version 2.27 to 2.38 allows attacker controlled loading of dynamically shared library in statically compiled setuid binaries that call dlopen including internal dlopen calls after setlocale or calls to...

Important: python-setuptools

Issue Overview: setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. A path traversal vulnerability in PackageIndex is present in setuptools prior to version 78.1.1. An attacker would be allowed to write files to arbitrary locations on the...

Important: amazon-ssm-agent

Issue Overview: SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted. CVE-2025-22869 Affected Packages:...