CVE-2025-23245

CVE-2025-23245 affects NVIDIA vGPU software for Windows and Linux, due to a vulnerability in the Virtual GPU Manager (vGPU plugin) that may allow a guest to access global resources, potentially causing a denial of service. The CVSS metrics indicate a local, low-privilege exploit with a high impac...

CVE-2025-23245

NVIDIA vGPU software for Windows and Linux contains a vulnerability in the Virtual GPU Manager vGPU plugin, where it allows a guest to access global resources. A successful exploit of this vulnerability might lead to denial of service...

NVIDIA vGPU 资源管理错误漏洞

NVIDIA vGPU is a virtual GPU technology from NVIDIA. A resource management error vulnerability exists in NVIDIA vGPU that stems from allowing a guest to consume uncontrolled resources, which could result in a denial of service...

NVIDIA vGPU 安全漏洞

NVIDIA vGPU is a virtual GPU technology from NVIDIA, USA. A security vulnerability exists in NVIDIA vGPU that stems from allowing guest access to global resources, which could result in a denial of service...

CVE-2025-23246: Uncontrolled Resource Consumption

NVIDIA vGPU software for Windows and Linux contains a vulnerability in the Virtual GPU Manager vGPU plugin, where it allows a guest to consume uncontrolled resources. A successful exploit of this vulnerability might lead to denial of service...

CVE-2025-23245: Incorrect Permission Assignment for Critical Resource

NVIDIA vGPU software for Windows and Linux contains a vulnerability in the Virtual GPU Manager vGPU plugin, where it allows a guest to access global resources. A successful exploit of this vulnerability might lead to denial of service...

NVIDIA Virtual GPU Manager DoS (CVE-2025-23245) (April 2025)

The NVIDIA Virtual GPU Manager software on the remote host is missing a security update. It is, therefore, affected by denial of service vulnerability: - NVIDIA vGPU software for Windows and Linux contains a vulnerability in the Virtual GPU Manager vGPU plugin, where it allows a guest to access...

PT-2025-18650

Name of the Vulnerable Software and Affected Versions NVIDIA vGPU software for Windows and Linux affected versions not specified Description The issue is related to a vulnerability in the Virtual GPU Manager vGPU plugin that allows a guest to consume uncontrolled resources. A successful exploit o...

Security Bulletin: NVIDIA GPU Display Driver - April 2025

NVIDIA has released a software security update for NVIDIA GPU Display Driver to address the issues that are disclosed in this bulletin. To protect your system, download and install this software update through the NVIDIA Driver Downloads page or, for the vGPU software and Cloud Gaming updates,...

USN-7413-1: Linux kernel (IoT) vulnerabilities

Ziming Zhang discovered that the DRM driver for VMware Virtual GPU did not properly handle certain error conditions, leading to a NULL pointer dereference. A local attacker could possibly trigger this vulnerability to cause a denial of service. CVE-2022-38096 Ye Zhang and Nicolas Wu discovered th...

UBUNTU-CVE-2022-49532

In the Linux kernel, the following vulnerability has been resolved: drm/virtio: fix NULL pointer dereference in virtiogpuconngetmodes drmcvtmode may return NULL and we should check it. This bug is found by syzkaller: FAULTINJECTION stacktrace: 168.567394 FAULTINJECTION: forcing a failure. name...

Imagination GPU Driver 安全漏洞

The Imagination GPU Driver is a graphics driver from Imagination. A security vulnerability exists in the Imagination GPU Driver that originates from kernel software installed and running in the Guest VM that may leverage memory shared with the GPU firmware to write data outside of the Guest's...

The vulnerability of the NVIDIA Virtual GPU Manager driver, which allows a hacker to execute arbitrary code, trigger service failures, or disclose sensitive information.

The vulnerability of the NVIDIA Virtual GPU Manager driver relates to the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code, cause service failures, or disclose sensitive information...

CVE-2024-0077

NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin, where it allows a guest OS to allocate resources for which the guest OS is not authorized. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, information...

CVE-2024-0146

CVE-2024-0146 affects NVIDIA vGPU software’s Virtual GPU Manager. The vulnerability is described as memory corruption in the Virtual GPU Manager that could allow a malicious guest to cause code execution, denial of service, information disclosure, or data tampering. The CVSS 3.1 vectors (Local at...

CVE-2024-0146

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a malicious guest could cause memory corruption. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, or data tampering...

CVE-2024-0146: Buffer Copy without Checking Size of Input

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a malicious guest could cause memory corruption. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, or data tampering...

NVIDIA vGPU Software 安全漏洞

NVIDIA vGPU Software is a management software from NVIDIA, USA, used to provide GPU capabilities to virtual machines. The software supports multiple virtual machines to access the host's GPU, providing graphics performance and application compatibility for virtual machines. A security vulnerabili...

PT-2025-1570

Name of the Vulnerable Software and Affected Versions NVIDIA vGPU software versions are not explicitly specified in the provided descriptions. Description The issue is related to a malicious guest causing memory corruption in the Virtual GPU Manager. A successful exploit might lead to code...

USN-7185-2 linux-azure, linux-azure-4.15 vulnerabilities

Ziming Zhang discovered that the VMware Virtual GPU DRM driver in the Linux kernel contained an integer overflow vulnerability. A local attacker could use this to cause a denial of service system crash. CVE-2022-36402 Zheng Wang discovered a use-after-free in the Renesas Ethernet AVB driver in th...