CVE-2025-33226

NVIDIA NeMo Framework for all platforms contains a vulnerability where malicious data created by an attacker may cause a code injection. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, and data tampering...

CVE-2025-33235

NVIDIA Resiliency Extension for Linux is affected by a race condition in the checkpointing core that may allow information disclosure, data tampering, denial of service, or privilege escalation. The vulnerability is documented across multiple feeds (NVD/Red Hat/NVIDIA bulletin) and is associated ...

CVE-2025-33225

NVIDIA Resiliency Extension for Linux contains a vulnerability in log aggregation, where an attacker could cause predictable log-file names. A successful exploit of this vulnerability may lead to escalation of privileges, code execution, denial of service, information disclosure, and data tamperi...

CVE-2025-33225

Summary of CVE-2025-33225 Vulnerability: NVIDIA Resiliency Extension for Linux contains a flaw in log aggregation that allows an attacker to cause predictable log-file names. Impact (as stated): potential escalation of privileges, code execution, denial of service, information disclosure, and dat...

CVE-2025-33210

CVE-2025-33210 affects NVIDIA Isaac Lab. Multiple connected sources confirm a deserialization vulnerability in Isaac Lab that can lead to arbitrary code execution when untrusted data is deserialized. Impact is tied to versions prior to 2.3.0; upgrading Isaac Lab to 2.3.0 or later is the recommend...

CVE-2025-33210

NVIDIA Isaac Lab contains a deserialization vulnerability. A successful exploit of this vulnerability might lead to code execution...

CVE-2025-33210

NVIDIA Isaac Lab contains a deserialization vulnerability. A successful exploit of this vulnerability might lead to code execution...

CVE-2025-33210

NVIDIA Isaac Lab contains a deserialization vulnerability. A successful exploit of this vulnerability might lead to code execution...

CVE-2025-33226

NVIDIA NeMo Framework for all platforms contains a vulnerability where malicious data created by an attacker may cause a code injection. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, and data tampering...

CVE-2025-33226

CVE-2025-33226 affects NVIDIA NeMo Framework for all platforms. The vulnerability allows code injection via malicious data created by an attacker, with potential outcomes including code execution, privilege escalation, information disclosure, and data tampering as described across multiple source...

CVE-2025-33226

NVIDIA NeMo Framework for all platforms contains a vulnerability where malicious data created by an attacker may cause a code injection. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, and data tampering...

CVE-2025-33212

Summary: NVIDIA NeMo Framework’s model-loading vulnerability could enable code execution, privilege escalation, DoS, or data tampering when loading a malicious file. Root cause: improper control during file/model loading. Impact: HIGH across confidentiality, integrity, and availability. Exploitat...

CVE-2025-33212

NVIDIA NeMo Framework contains a vulnerability in model loading that could allow an attacker to exploit improper control mechanisms if a user loads a maliciously crafted file. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, denial of service, and...

CVE-2025-33212

NVIDIA NeMo Framework contains a vulnerability in model loading that could allow an attacker to exploit improper control mechanisms if a user loads a maliciously crafted file. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, denial of service, and...

UBUNTU-CVE-2025-68233

In the Linux kernel, the following vulnerability has been resolved: drm/tegra: Add call to putpid Add a call to putpid corresponding to gettaskpid. host1xmemorycontextalloc does not take ownership of the PID so we need to free it here to avoid leaking. [email protected]: reword commit message...

PT-2025-51762

Name of the Vulnerable Software and Affected Versions NVIDIA Resiliency Extension for Linux affected versions not specified Description The NVIDIA Resiliency Extension for Linux has an issue in its checkpointing core that allows an attacker to create a race condition. Exploitation could result in...

PT-2025-51761

NVIDIA NeMo Framework for all platforms contains a vulnerability where malicious data created by an attacker may cause a code injection. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, and data tampering...

NVIDIA Nemo Framework 代码问题漏洞

NVIDIA Nemo Framework is a framework for building and deploying generative AI models from NVIDIA. The NVIDIA Nemo Framework contains a security vulnerability that can be exploited by attackers to cause code execution, elevation of privilege, information disclosure, and data tampering...

NVIDIA Resiliency Extension 安全漏洞

NVIDIA Resiliency Extension is a Python package from NVIDIA. A security vulnerability exists in NVIDIA Resiliency Extension that originates from predictable log file names in log aggregation and could lead to elevation of privilege, code execution, denial of service, information disclosure, and...

Security Bulletin: NVIDIA Resiliency Extension - December 2025

NVIDIA has released a software update for NVIDIA® Resiliency Extension. To protect your system, clone or update this software to version 0.5.0 or later from NVIDIA Resiliency Extension on GitHub. Go to NVIDIA Product Security...