CVE-2025-23302

NVIDIA HGX and DGX contain a vulnerability where a misconfiguration of the LS10 could enable an attacker to set an unsafe debug access level. A successful exploit of this vulnerability might lead to denial of service...

CVE-2025-23302

NVIDIA HGX and DGX are affected by CVE-2025-23302 due to a LS10 misconfiguration that could enable an unsafe debug access level and cause denial of service. The official bulletin specifies remediation by updating LS10 to version 1.8.0 (affected versions prior to 1.7.1). Blackwell variants (HGX/DG...

CVE-2025-23302

NVIDIA HGX and DGX contain a vulnerability where a misconfiguration of the LS10 could enable an attacker to set an unsafe debug access level. A successful exploit of this vulnerability might lead to denial of service...

CVE-2025-23301

NVIDIA HGX and DGX contain a vulnerability where a misconfiguration of the VBIOS could enable an attacker to set an unsafe debug access level. A successful exploit of this vulnerability might lead to denial of service...

CVE-2025-23301

The connected NVIDIA bulletin confirms CVE-2025-23301 affects NVIDIA HGX and DGX systems due to a misconfiguration in the VBIOS that could allow an attacker to set an unsafe debug access level, potentially causing a denial of service. Affected components/versions include VBIOS on Hopper HGX/DGX (...

CVE-2025-23301

NVIDIA HGX and DGX contain a vulnerability where a misconfiguration of the VBIOS could enable an attacker to set an unsafe debug access level. A successful exploit of this vulnerability might lead to denial of service...

NVIDIA Container Toolkit for all platforms contains a vulnerability in some hooks used to initialize the container, where an attacker could execute arbitrary code with elevated permissions. A successful exploit of this vulnerability might lead to escalation of privileges, data tampering, information disclosure, and denial of service.

...

NVIDIA BlueField 安全漏洞

NVIDIA BlueField is a series of data processing units from NVIDIA. NVIDIA BlueField has a security vulnerability that can be exploited by attackers to potentially cause a denial of service, elevation of privilege, and information disclosure...

PT-2025-36006

Name of the Vulnerable Software and Affected Versions: NVIDIA ConnectX affected versions not specified Description: NVIDIA ConnectX contains an issue in the management interface that allows an attacker with local access to bypass authorization checks and modify the configuration. A successful...

PT-2025-35950

Name of the Vulnerable Software and Affected Versions: NVIDIA HGX and DGX affected versions not specified Description: NVIDIA HGX and DGX systems are susceptible to a misconfiguration in the VBIOS that could allow an attacker to establish an unsafe debug access level. Exploitation of this issue m...

NVIDIA DOCA 安全漏洞

NVIDIA DOCA is a software framework from NVIDIA. NVIDIA DOCA has a security vulnerability that can be exploited by attackers to cause elevation of privilege...

NVIDIA DOCA 安全漏洞

NVIDIA DOCA is a software framework from NVIDIA. NVIDIA DOCA has a security vulnerability that can be exploited by attackers to potentially cause elevation of privilege...

NVIDIA Mellanox DPDK 竞争条件问题漏洞

NVIDIA Mellanox DPDK is a data plane development kit from NVIDIA. NVIDIA Mellanox DPDK suffers from a Competitive Condition Issue vulnerability that stems from the Poll Mode Driver could lead to information disclosure and denial of service attacks...

NVIDIA DGX和NVIDIA HGX 安全漏洞

NVIDIA DGX and NVIDIA HGX are both products of NVIDIA Corporation, U.S.A. NVIDIA DGX is a high-performance workstation for deep learning applications.NVIDIA HGX is a modular GPU acceleration platform. A security vulnerability exists in NVIDIA DGX and NVIDIA HGX, which stems from a misconfiguratio...

PT-2025-35947

Name of the Vulnerable Software and Affected Versions: NVIDIA DOCA affected versions not specified Description: NVIDIA DOCA contains an issue in the collectx-clxapidev Debian package that may allow a low-privileged actor to escalate privileges. A successful exploit of this issue could lead to...

PT-2025-35951

Name of the Vulnerable Software and Affected Versions: NVIDIA HGX and DGX affected versions not specified Description: NVIDIA HGX and DGX systems are susceptible to a misconfiguration in the LS10 component, potentially allowing an attacker to establish an unsafe debug access level. Exploitation o...

NVIDIA Cumulus Linux和NVIDIA NVOS 日志信息泄露漏洞

NVIDIA Cumulus Linux is an open network operating system.NVIDIA NVOS is an operating system. A log information disclosure vulnerability exists in NVIDIA Cumulus Linux and NVIDIA NVOS. The vulnerability stems from a hash password that is not properly hidden in log files and can be exploited by an...

NVIDIA DGX和NVIDIA HGX 安全漏洞

NVIDIA DGX and NVIDIA HGX are both products of NVIDIA Corporation, U.S.A. NVIDIA DGX is a high-performance workstation for deep learning applications.NVIDIA HGX is a modular GPU acceleration platform. A security vulnerability exists in NVIDIA DGX and NVIDIA HGX that stems from an improperly...

NVIDIA ConnectX 安全漏洞

NVIDIA ConnectX is a series of intelligent network interface cards from NVIDIA. NVIDIA ConnectX has a security vulnerability that can be exploited by attackers to potentially cause denial of service, elevation of privilege, information disclosure, and data tampering...

SUSE SLES15: nv-prefer-signed-open-driver / etc (SUSE-SU-2025:03062-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03062-1 advisory. Updated CUDA variant to 580.65.06: - CVE-2025-23277: Fixed access memory outside bounds permitted under normal use cases in NVIDIA...