CVE-2023-25526

Summary of CVE-2023-25526 (NVIDIA Cumulus Linux). The vulnerability exists in the neighmgrd and nlmanager components of NVIDIA Cumulus Linux, where an attacker on an adjacent network can inject a crafted packet to trigger an uncaught exception, potentially causing a denial of service. Affected pr...

CVE-2023-25525

The CVE-2023-25525 issue affects NVIDIA Cumulus Linux (SVI forwarding path) where a VxLAN-encapsulated IPv6 packet with DMAC/DIPv6 set to the link-local SVI address may be incorrectly forwarded, potentially leading to information disclosure. Affected versions are all prior to 5.6.0; the NVIDIA bu...

CVE-2025-33181

CVE-2025-33181 affects NVIDIA Cumulus Linux and NVOS: a vulnerability in the NVUE interface allows a low-privilege user to inject commands, potentially enabling privilege escalation. The issue is documented across multiple feeds (NVD, OSV, CIRCL) with details indicating a local/remote-like impact...

CVE-2025-33180

CVE-2025-33180 affects NVIDIA Cumulus Linux and NVOS via the NVUE interface, where a low-privileged user can inject a command, potentially leading to privilege escalation. The issue is supported by Red Hat, CIRCL, NVD, and NVIDIA bulletin data, with confirmations of the NVUE command-injection pat...

CVE-2025-33179

The CVE-2025-33179 issue affects NVIDIA Cumulus Linux and NVOS, stemming from the NVUE interface where a low-privileged user could run an unauthorized command, potentially leading to privilege escalation. Documents from NVD/Red Hat and NVIDIA bulletin confirm impact and provide remediation guidan...