Security Bulletin: NVIDIA RAPIDS AI - January 2025

NVIDIA has released a software update for NVIDIA® RAPIDS AI cuDF and cuML to address the issues below. To protect your system, download and install this software update from the RAPIDS AI Machine Learning Library. Go to NVIDIA Product Security. Details This section provides a summary of potential...

SUSE SLES15: kernel-firmware-nvidia-gspx-G06-cuda / nv-prefer-signed-open-driver / etc (SUSE-SU-2025:0208-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0208-1 advisory. - Update to 550.144.03 bsc1235461, bsc1235871 fixes CVE-2024-0131, CVE-2024-0147, CVE-2024-0149, CVE-2024-0150, CVE-2024-53869...

SUSE SLED15: kernel-firmware-nvidia-gspx-G06-cuda / nv-prefer-signed-open-driver / etc (SUSE-SU-2025:0207-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0207-1 advisory. - Update to 550.144.03 bsc1235461, bsc1235871 fixes CVE-2024-0131, CVE-2024-0147, CVE-2024-0149,...

Security update for nvidia-open-driver-G06-signed

This update for nvidia-open-driver-G06-signed fixes the following issues: Update to 550.144.03 bsc1235461, bsc1235871 fixes CVE-2024-0131, CVE-2024-0147, CVE-2024-0149, CVE-2024-0150, CVE-2024-53869 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like...

SUSE-SU-2025:0208-1 Security update for nvidia-open-driver-G06-signed

This update for nvidia-open-driver-G06-signed fixes the following issues: - Update to 550.144.03 bsc1235461, bsc1235871 fixes CVE-2024-0131, CVE-2024-0147, CVE-2024-0149, CVE-2024-0150, CVE-2024-53869...

Security update for nvidia-open-driver-G06-signed

This update for nvidia-open-driver-G06-signed fixes the following issues: Update to 550.144.03 bsc1235461, bsc1235871 fixes CVE-2024-0131, CVE-2024-0147, CVE-2024-0149, CVE-2024-0150, CVE-2024-53869 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like...

SUSE-SU-2025:0207-1 Security update for nvidia-open-driver-G06-signed

This update for nvidia-open-driver-G06-signed fixes the following issues: - Update to 550.144.03 bsc1235461, bsc1235871 fixes CVE-2024-0131, CVE-2024-0147, CVE-2024-0149, CVE-2024-0150, CVE-2024-53869...

CVE-2025-21663

In the Linux kernel, the following vulnerability has been resolved: net: stmmac: dwmac-tegra: Read iommu stream id from device tree Nvidia's Tegra MGBE controllers require the IOMMU "Stream ID" SID to be written to the MGBEWRAPAXIASID0CTRL register. The current driver is hard coded to use MGBE0's...

CVE-2025-21663 net: stmmac: dwmac-tegra: Read iommu stream id from device tree

In the Linux kernel, the following vulnerability has been resolved: net: stmmac: dwmac-tegra: Read iommu stream id from device tree Nvidia's Tegra MGBE controllers require the IOMMU "Stream ID" SID to be written to the MGBEWRAPAXIASID0CTRL register. The current driver is hard coded to use MGBE0's...

CVE-2025-21663

The CVE-2025-21663 issue affects Linux kernels with the net: stmmac: dwmac-tegra driver. Root cause: the MGBE wrap SID was hard-coded to MGBE0 instead of reading the IOMMU Stream ID from the device tree, causing misconfiguration for devices other than MGBE0 and leading to timeouts or kernel panic...

CVE-2025-21663 net: stmmac: dwmac-tegra: Read iommu stream id from device tree

In the Linux kernel, the following vulnerability has been resolved: net: stmmac: dwmac-tegra: Read iommu stream id from device tree Nvidia's Tegra MGBE controllers require the IOMMU "Stream ID" SID to be written to the MGBEWRAPAXIASID0CTRL register. The current driver is hard coded to use MGBE0's...

PT-2025-2995

Name of the Vulnerable Software and Affected Versions NVIDIA Unified Memory driver for Linux affected versions not specified Description The issue concerns a vulnerability in the NVIDIA Unified Memory driver for Linux, where an attacker could potentially leak uninitialized memory. This could lead...

OPENSUSE-SU-2025:14667-1 nvidia-modprobe-565.77-1.1 on GA media

These are all security issues fixed in the nvidia-modprobe-565.77-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2025-1572

Name of the Vulnerable Software and Affected Versions NVIDIA GPU Display Driver for Linux affected versions not specified Description The NVIDIA GPU Display Driver for Linux contains a vulnerability that could allow an attacker unauthorized access to files, potentially leading to limited...

SUSE CVE-2024-0147

NVIDIA GPU display driver for Windows and Linux contains a vulnerability where referencing memory after it has been freed can lead to denial of service or data tampering...

SUSE CVE-2024-0149

NVIDIA GPU Display Driver for Linux contains a vulnerability which could allow an attacker unauthorized access to files. A successful exploit of this vulnerability might lead to limited information disclosure...

SUSE CVE-2024-0150

NVIDIA GPU display driver for Windows and Linux contains a vulnerability where data is written past the end or before the beginning of a buffer. A successful exploit of this vulnerability might lead to information disclosure, denial of service, or data tampering...

SUSE CVE-2024-53869

NVIDIA Unified Memory driver for Linux contains a vulnerability where an attacker could leak uninitialized memory. A successful exploit of this vulnerability might lead to information disclosure...

OPENSUSE-SU-2025:14661-1 nvidia-open-driver-G06-signed-default-devel-550.144.03-1.1 on GA media

These are all security issues fixed in the nvidia-open-driver-G06-signed-default-devel-550.144.03-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2025-1565 · Nvidia +3 · Nvidia-Gfx Kernel Driver +3

Name of the Vulnerable Software and Affected Versions: NVIDIA GPU kernel driver for Windows and Linux affected versions not specified Description: The issue is related to a potential user-mode attacker being able to read a buffer with an incorrect length. This could lead to denial of service...