CVE-2025-23261

NVIDIA Cumulus Linux and NVOS products contain a vulnerability, where hashed user passwords are not properly suppressed in log files, potentially disclosing information to unauthorized users...

CVE-2025-23259

NVIDIA Mellanox DPDK contains a vulnerability in Poll Mode Driver PMD, where an attacker on a VM in the system might be able to cause information disclosure and denial of service on the network interface...

CVE-2025-23259

CVE-2025-23259 affects the DPDK Poll Mode Driver (PMD) used in NVIDIA Mellanox DPDK components. The issue allows a VM-level attacker to leak information and cause denial of service on the network interface. Public advisories from SUSE/openSUSE/Nessus indicate this vulnerability was addressed by u...

CVE-2025-23259

NVIDIA Mellanox DPDK contains a vulnerability in Poll Mode Driver PMD, where an attacker on a VM in the system might be able to cause information disclosure and denial of service on the network interface...

CVE-2025-23258

NVIDIA DOCA contains a vulnerability in the collectx-dpeserver Debian package for arm64 that could allow an attacker with low privileges to escalate privileges. A successful exploit of this vulnerability might lead to escalation of privileges...

CVE-2025-23258

NVIDIA DOCA contains a vulnerability in the collectx-dpeserver Debian package for arm64 that could allow an attacker with low privileges to escalate privileges. A successful exploit of this vulnerability might lead to escalation of privileges...

CVE-2025-23258

CVE-2025-23258 affects NVIDIA DOCA, specifically the collectx-dpeserver Debian package for arm64. The vulnerability could allow a low-privilege local attacker to escalate privileges. NVIDIA’s accompanying bulletin indicates a fix is available in DOCA updates (e.g., DOCA 3.0.0 for the collectx-dpe...

CVE-2025-23257

NVIDIA DOCA contains a vulnerability in the collectx-clxapidev Debian package that could allow an actor with low privileges to escalate privileges. A successful exploit of this vulnerability might lead to escalation of privileges...

CVE-2025-23257

CVE-2025-23257 affects NVIDIA DOCA in the collectx-clxapidev Debian package. Root cause: a vulnerability that could allow a low-privilege actor to escalate privileges. Impact as per sources: local escalation with high impact on confidentiality, integrity, and availability. Remediation: NVIDIA’s s...

CVE-2025-23257

NVIDIA DOCA contains a vulnerability in the collectx-clxapidev Debian package that could allow an actor with low privileges to escalate privileges. A successful exploit of this vulnerability might lead to escalation of privileges...

CVE-2025-23302

NVIDIA HGX and DGX contain a vulnerability where a misconfiguration of the LS10 could enable an attacker to set an unsafe debug access level. A successful exploit of this vulnerability might lead to denial of service...

CVE-2025-23302

NVIDIA HGX and DGX are affected by CVE-2025-23302 due to a LS10 misconfiguration that could enable an unsafe debug access level and cause denial of service. The official bulletin specifies remediation by updating LS10 to version 1.8.0 (affected versions prior to 1.7.1). Blackwell variants (HGX/DG...

CVE-2025-23302

NVIDIA HGX and DGX contain a vulnerability where a misconfiguration of the LS10 could enable an attacker to set an unsafe debug access level. A successful exploit of this vulnerability might lead to denial of service...

CVE-2025-23301

The connected NVIDIA bulletin confirms CVE-2025-23301 affects NVIDIA HGX and DGX systems due to a misconfiguration in the VBIOS that could allow an attacker to set an unsafe debug access level, potentially causing a denial of service. Affected components/versions include VBIOS on Hopper HGX/DGX (...

CVE-2025-23301

NVIDIA HGX and DGX contain a vulnerability where a misconfiguration of the VBIOS could enable an attacker to set an unsafe debug access level. A successful exploit of this vulnerability might lead to denial of service...

CVE-2025-23301

NVIDIA HGX and DGX contain a vulnerability where a misconfiguration of the VBIOS could enable an attacker to set an unsafe debug access level. A successful exploit of this vulnerability might lead to denial of service...

NVIDIA Container Toolkit for all platforms contains a vulnerability in some hooks used to initialize the container, where an attacker could execute arbitrary code with elevated permissions. A successful exploit of this vulnerability might lead to escalation of privileges, data tampering, information disclosure, and denial of service.

...

NVIDIA BlueField 安全漏洞

NVIDIA BlueField is a series of data processing units from NVIDIA. NVIDIA BlueField has a security vulnerability that can be exploited by attackers to potentially cause a denial of service, elevation of privilege, and information disclosure...

PT-2025-36006

Name of the Vulnerable Software and Affected Versions: NVIDIA ConnectX affected versions not specified Description: NVIDIA ConnectX contains an issue in the management interface that allows an attacker with local access to bypass authorization checks and modify the configuration. A successful...

PT-2025-35950

Name of the Vulnerable Software and Affected Versions: NVIDIA HGX and DGX affected versions not specified Description: NVIDIA HGX and DGX systems are susceptible to a misconfiguration in the VBIOS that could allow an attacker to establish an unsafe debug access level. Exploitation of this issue m...