32 matches found
CVE-2025-33207
NVIDIA Networking BlueField and ConnectX products are vulnerable to a flaw in a control register (CWE-1262). A user with VF access can send a malicious command to the firmware, resulting in improper access control for the register interface. Successful exploitation may lead to a denial of service...
Security Bulletin: NVIDIA Networking Bluefield, ConnectX - July 2026
NVIDIA has released a software update for NVIDIA® Networking Bluefield, ConnectX. To protect your system, download and install the latest NVIDIA components from VIRTIO-Net. Go to NVIDIA Product Security. Details The following table summarizes the potential vulnerabilities that this security updat...
PT-2026-54609
Name of the Vulnerable Software and Affected Versions NVIDIA ConnectX affected versions not specified NVIDIA BlueField affected versions not specified Description A flaw exists in the command interface that allows a local user with virtual function VF access to trigger a write out of bounds by...
CVE-2025-23351: Out-of-bounds Write
NVIDIA ConnectX and BlueField contain a vulnerability in the command interface where a local user with virtual function VF access may cause a write out of bounds by crafted input. A successful exploit of this vulnerability may lead to arbitrary code execution on the device...
CVE-2023-31037
NVIDIA Bluefield 2 and Bluefield 3 DPU BMC contains a vulnerability in ipmitool, where a root user may cause code injection by a network call. A successful exploit of this vulnerability may lead to code execution on the OS...
AI Security: NVIDIA BlueField Now with Vision One™
Launching at NVIDIA GTC 2025 - Transforming AI Security with Trend Vision One™ on NVIDIA BlueField...
CVE-2025-23299
NVIDIA Bluefield and ConnectX contain a vulnerability in the management interface that could allow a malicious actor with high privilege access to execute arbitrary code...
CVE-2025-23299
NVIDIA Bluefield and ConnectX contain a vulnerability in the management interface that could allow a malicious actor with high privilege access to execute arbitrary code...
CVE-2025-23299
The CVE-2025-23299 entry affects NVIDIA Bluefield and ConnectX products with a vulnerability in the management interface that could let a high-privilege attacker execute arbitrary code locally. The issue is documented across multiple sources, and NVIDIA’s security bulletin lists concrete remediat...
CVE-2025-23299: Out-of-bounds Write
NVIDIA Bluefield and ConnectX contain a vulnerability in the management interface that could allow a malicious actor with high privilege access to execute arbitrary code...
NVIDIA ConnectX和NVIDIA BlueField 缓冲区错误漏洞
NVIDIA ConnectX and NVIDIA BlueField are both products of NVIDIA Corporation.NVIDIA ConnectX is a family of Intelligent Network Interface cards.NVIDIA BlueField is a family of data processing units. A buffer error vulnerability exists in NVIDIA ConnectX and NVIDIA BlueField, which stems from a fl...
EUVD-2023-35374
Malicious code in bioql PyPI...
CVE-2025-23256
NVIDIA BlueField contains a vulnerability in the management interface, where an attacker with local access could cause incorrect authorization to modify the configuration. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure,...
The vulnerability of the control interface for NVIDIA BlueField microprogrammed software for data processing chips allows attackers to enhance their privileges.
The vulnerability of the control interface for NVIDIA BlueField microprogrammed data processing software is related to deficiencies in the authentication process. Exploiting this vulnerability can allow attackers to enhance their privileges by modifying configuration data...
CVE-2025-23256: Incorrect Authorization
NVIDIA BlueField contains a vulnerability in the management interface, where an attacker with local access could cause incorrect authorization to modify the configuration. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure,...
USN-7173-2: Linux kernel vulnerabilities
Ziming Zhang discovered that the DRM driver for VMware Virtual GPU did not properly handle certain error conditions, leading to a NULL pointer dereference. A local attacker could possibly trigger this vulnerability to cause a denial of service. CVE-2022-38096 Several security issues were discover...
NVIDIA BlueField License Issue Vulnerability
NVIDIA BlueField is a series of data processing units from NVIDIA. NVIDIA BlueField suffers from an authorization issue vulnerability that stems from mishandling of privileges, which can be exploited by an attacker to cause a denial of service, data tampering, and information disclosure...
The vulnerability of NVIDIA BlueField data processing processor microprogramming software, related to access control deficiencies, allows a intruder to gain unauthorized access to read and modify data, or to cause service failures.
The vulnerability of NVIDIA BlueField data processing processor microprogramming software is related to deficiencies in access control. Exploiting this vulnerability could allow an intruder to gain unauthorized access to read and modify data, or cause service failures...
NVIDIA BlueField 安全漏洞
NVIDIA BlueField is a series of data processing units from NVIDIA. NVIDIA BlueField suffers from an authorization issue vulnerability that stems from mishandling of privileges, which can be exploited by an attacker to cause a denial of service, data tampering, and information disclosure...
USN-6924-1: Linux kernel vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM SCMI message protocol; - InfiniBand drivers; - TTY drivers; - TLS protocol; CVE-2024-26584, CVE-2024-36016,...