CVE-2025-23282

HighCVSS 7.0/10Last modified Oct 18, 2026

Description

NVIDIA Display Driver for Linux contains a vulnerability where an attacker might be able to use a race condition to escalate privileges. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure.

Metrics

CVSS 3.1 7.0/10CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-415

Affected software

VendorProductVersions
NVIDIAVirtual GPU Manager580.82.02(All versions up to and including the August 2025 release)
NVIDIAVirtual GPU Manager580.82.02(All versions prior to and including vGPU 19.1)
NVIDIAVirtual GPU Manager570.172.07(All versions prior to and including vGPU 18.4)
NVIDIAVirtual GPU Manager535.261.04(All versions prior to and including vGPU 16.11)
NVIDIAGeForceAll driver versions prior to 580.95.05
NVIDIAGeForceAll driver versions prior to 570.195.03
NVIDIAGeForceAll driver versions prior to 535.274.02
NVIDIANVIDIA RTX, Quadro, NVSAll driver versions prior to 580.95.05
NVIDIANVIDIA RTX, Quadro, NVSAll driver versions prior to 570.195.03
NVIDIANVIDIA RTX, Quadro, NVSAll driver versions prior to 535.274.02
NVIDIATeslaAll driver versions prior to 580.95.05
NVIDIATeslaAll driver versions prior to 570.195.03
NVIDIATeslaAll driver versions prior to 535.274.02
NVIDIAGuest driver580.82.07(All versions prior to and including vGPU 19.1)
NVIDIAGuest driver580.82.07(All versions up to and including the August 2025 release)
NVIDIAGuest driver570.172.08(All versions prior to and including vGPU 18.4)
NVIDIAGuest driver535.261.03(All versions prior to and including vGPU 16.11)

References

Timeline

Published
Oct 10, 2025
Last modified
Oct 18, 2026
NVD status
Deferred

Related CVEs from 2025

CVE-2025-232837.8NVIDIA vGPU software for Linux-style hypervisors contains a vulnerability in the Virtual GPU Manager, where a malicious guest could cause stCVE-2025-232847.8NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a malicious guest could cause a stack buffer overflow. A sucCVE-2025-232855.5NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where it allows a guest to access global resources. A successful eCVE-2025-232864.4NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where an attacker could read invalid memory. A successful exploit oCVE-2025-232873.3NVIDIA GPU Display Driver for Windows contains a vulnerability where an attacker may access sensitive system-level information. A successfulCVE-2025-232883.3NVIDIA GPU Display Driver for Windows contains a vulnerability  where an attacker may cause an exposure of sensitive system information withCVE-2025-232895.5NVIDIA Omniverse Launcher for Windows and Linux contains a vulnerability in the launcher logs, where a user could cause sensitive informatioCVE-2025-23295.3In high traffic environments, a Silicon Labs OpenThread RCP (see impacted versions) fails to clear the SPI transmit buffer and may send a coCVE-2025-232902.5NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a guest could get global GPU metrics which may be influencedCVE-2025-232912.4NVIDIA Delegated Licensing Service for all appliance platforms contains a vulnerability where an User/Attacker may cause an authorized actioCVE-2025-232924.6NVIDIA Delegated Licensing Service for all appliance platforms contains a SQL injection vulnerability where an User/Attacker may cause an auCVE-2025-232938.7NVIDIA Delegated Licensing Service for all appliance platforms contains a vulnerability where an User/Attacker may cause an authorized actio