CVE-2023-25525

The CVE-2023-25525 issue affects NVIDIA Cumulus Linux (SVI forwarding path) where a VxLAN-encapsulated IPv6 packet with DMAC/DIPv6 set to the link-local SVI address may be incorrectly forwarded, potentially leading to information disclosure. Affected versions are all prior to 5.6.0; the NVIDIA bu...

CVE-2023-25526

Summary of CVE-2023-25526 (NVIDIA Cumulus Linux). The vulnerability exists in the neighmgrd and nlmanager components of NVIDIA Cumulus Linux, where an attacker on an adjacent network can inject a crafted packet to trigger an uncaught exception, potentially causing a denial of service. Affected pr...

CVE-2025-33181

CVE-2025-33181 affects NVIDIA Cumulus Linux and NVOS: a vulnerability in the NVUE interface allows a low-privilege user to inject commands, potentially enabling privilege escalation. The issue is documented across multiple feeds (NVD, OSV, CIRCL) with details indicating a local/remote-like impact...

CVE-2025-33180

CVE-2025-33180 affects NVIDIA Cumulus Linux and NVOS via the NVUE interface, where a low-privileged user can inject a command, potentially leading to privilege escalation. The issue is supported by Red Hat, CIRCL, NVD, and NVIDIA bulletin data, with confirmations of the NVUE command-injection pat...

CVE-2026-24184

An unauthenticated attacker on an adjacent network can trigger a buffer overflow in the LLDP daemon of NVIDIA Cumulus Linux via crafted LLDP frames, potentially leading to code execution. CVSS 3.1 scores this HIGH (7.5) with no privileges required; exploitation details are not publicly available....

CVE-2025-33179

The CVE-2025-33179 issue affects NVIDIA Cumulus Linux and NVOS, stemming from the NVUE interface where a low-privileged user could run an unauthorized command, potentially leading to privilege escalation. Documents from NVD/Red Hat and NVIDIA bulletin confirm impact and provide remediation guidan...

CVE-2026-24183

The Initial Description provides concrete technical details: the affected product is NVIDIA Cumulus Linux, the vulnerable component is the user management module, the root cause is improper privilege management, and the impact is local privilege escalation (CVSS 7.8 HIGH). No fix version or explo...