1083 matches found
Linux Distros Unpatched Vulnerability : CVE-2023-0193
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NVIDIA CUDA Toolkit SDK contains a vulnerability in cuobjdump, where a local user running the tool against a malicious binary may cause an out-of-bounds read,...
Linux Distros Unpatched Vulnerability : CVE-2024-0109
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NVIDIA CUDA Toolkit contains a vulnerability in command cuobjdump where a user may cause a crash by passing in a malformed ELF file. A successful exploit of thi...
Linux Distros Unpatched Vulnerability : CVE-2024-53879
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NVIDIA CUDA toolkit for Linux and Windows contains a vulnerability in the cuobjdump binary, where a user could cause a crash by passing a malformed ELF file to...
Security update for nvidia-open-driver-G06-signed
This update for nvidia-open-driver-G06-signed fixes the following issues: This update was retracted due to dependency problems with the CUDA Kmp. Update to 550.144.03 bsc1235461, bsc1235871: fixes CVE-2024-0131, CVE-2024-0147, CVE-2024-0149, CVE-2024-0150, CVE-2024-53869 let -cuda KMP conflict wi...
Important: cuda-drivers
Issue Overview: NVIDIA Display Driver for Linux and Windows contains a vulnerability in the kernel mode driver, where an attacker could access memory outside bounds permitted under normal use cases. A successful exploit of this vulnerability might lead to denial of service, data tampering, or...
Important: cuda-compat
Issue Overview: NVIDIA Display Driver for Linux and Windows contains a vulnerability in the kernel mode driver, where an attacker could access memory outside bounds permitted under normal use cases. A successful exploit of this vulnerability might lead to denial of service, data tampering, or...
Low: cuda-nvdisasm-13-0
Issue Overview: Placeholder CVE. Details forthcoming CVE-2025-23248 Affected Packages: cuda-nvdisasm-13-0 Issue Correction: Run dnf update cuda-nvdisasm-13-0 --releasever latest or dnf update --advisory ALAS2023NVIDIA-2025-144 --releasever latest to update your system. More information on how to...
Amazon Linux 2023 : cuda-nvdisasm-13 (ALAS2023NVIDIA-2025-145)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023NVIDIA-2025-145 advisory. NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the nvdisasm binary where a user may cause an out-of-bounds read by passing a malformed ELF file to nvdisasm. A successfu...
The vulnerability of the enable-cuda-compat function in software for creating and running NVIDIA Container Toolkit containers and NVIDIA GPU Operator resource management software allows a malicious actor to execute arbitrary code, gain elevated privileges, unauthorizedly access and modify protected information, or cause service failures.
The vulnerability of the enable-cuda-compat function in software for creating and running NVIDIA Container Toolkit containers, as well as in software for managing NVIDIA GPU resources, is related to the use of an unreliable search path. Exploiting this vulnerability allows a remote attacker to...
CVE-2025-23267
A flaw was found in nvidia-container-toolkit. The update-ldcache hook contains a vulnerability allowing an attacker to trigger link following via a specially crafted container image. This issue allows a local attacker to potentially cause data corruption. The root cause is the improper handling o...
Symlink Attack
Overview Affected versions of this package are vulnerable to Symlink Attack though incorrect handling of the OCI hook createContainer during container initialization when update-ldcache is used. An attacker can modify data or disrupt service by supplying a specially crafted container image that...
Untrusted Search Path
Overview Affected versions of this package are vulnerable to Untrusted Search Path though incorrect handling of the OCI hook createContainer during container initialization when enable-cuda-compat is used. An attacker with low privileges in a container can run arbitrary code with higher privilege...
Untrusted Search Path
Overview Affected versions of this package are vulnerable to Untrusted Search Path though incorrect handling of the OCI hook createContainer during container initialization when enable-cuda-compat is used. An attacker with low privileges in a container can run arbitrary code with higher privilege...
CVE-2025-38299
CVE-2025-38299 affects the Linux kernel ASoC Mediatek mt8195 driver. Root cause: ETDM1/2 IN/OUT were set to COMP_DUMMY/COMP_EMPTY when codec dai_name is null, leading to a NULL pointer dereference and kernel crash during probe. The fix initializes or guards these links to safe dummy/empty compone...
CVE-2024-47081 vulnerabilities
Vulnerabilities for packages: graalvm, nvidia-nsight-compute-13.1, kubeflow-pipelines-visualization-server, nvidia-nsight-compute-13.3, k8s-sidecar, mlflow, py3-pipenv, py3.9-pip, py3-requests, confluent-docker-utils, airflow-core, pgadmin4, superset, pypy-3.10, tensorflow-cpu-jupyter,...
GHSA-9PCC-GVX5-R5WM vulnerabilities
Vulnerabilities for packages: py3.10-vllm-cuda-12.6...
CVE-2025-30165 vulnerabilities
Vulnerabilities for packages: py3.10-vllm-cuda-12.6...
GHSA-9HJG-9R4M-MVJ7 vulnerabilities
Vulnerabilities for packages: graalvm, nvidia-nsight-compute-13.1, kubeflow-pipelines-visualization-server, nvidia-nsight-compute-13.3, k8s-sidecar, mlflow, py3-pipenv, py3.9-pip, py3-requests, confluent-docker-utils, airflow-core, pgadmin4, superset, pypy-3.10, tensorflow-cpu-jupyter,...