CVE-2025-23300

MediumCVSS 5.5/10Last modified Oct 18, 2026

Description

NVIDIA Display Driver for Linux contains a vulnerability in the kernel driver, where a user could cause a null pointer dereference by allocating a specific memory resource. A successful exploit of this vulnerability might lead to denial of service.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-476

Affected software

VendorProductVersions
NVIDIAVirtual GPU Manager580.82.02(All versions up to and including the August 2025 release)
NVIDIAVirtual GPU Manager580.82.02(All versions prior to and including vGPU 19.1)
NVIDIAVirtual GPU Manager570.172.07(All versions prior to and including vGPU 18.4)
NVIDIAVirtual GPU Manager535.261.04(All versions prior to and including vGPU 16.11)
NVIDIAGeForceAll driver versions prior to 580.95.05
NVIDIAGeForceAll driver versions prior to 570.195.03
NVIDIAGeForceAll driver versions prior to 535.274.02
NVIDIANVIDIA RTX, Quadro, NVSAll driver versions prior to 580.95.05
NVIDIANVIDIA RTX, Quadro, NVSAll driver versions prior to 570.195.03
NVIDIANVIDIA RTX, Quadro, NVSAll driver versions prior to 535.274.02
NVIDIATeslaAll driver versions prior to 580.95.05
NVIDIATeslaAll driver versions prior to 570.195.03
NVIDIATeslaAll driver versions prior to 535.274.02
NVIDIAGuest driver580.82.07(All versions prior to and including vGPU 19.1)
NVIDIAGuest driver580.82.07(All versions up to and including the August 2025 release)
NVIDIAGuest driver570.172.08(All versions prior to and including vGPU 18.4)
NVIDIAGuest driver535.261.03(All versions prior to and including vGPU 16.11)

References

Timeline

Published
Oct 23, 2025
Last modified
Oct 18, 2026
NVD status
Deferred

Related CVEs from 2025

CVE-2025-233014.2NVIDIA HGX and DGX contain a vulnerability where a misconfiguration of the VBIOS could enable an attacker to set an unsafe debug access leveCVE-2025-233024.2NVIDIA HGX and DGX contain a vulnerability where a misconfiguration of the LS10 could enable an attacker to set an unsafe debug access levelCVE-2025-233039.8NVIDIA NeMo Framework for all platforms contains a vulnerability where a user could cause a deserialization of untrusted data by remote codeCVE-2025-233049.8NVIDIA NeMo library for all platforms contains a vulnerability in the model loading component, where an attacker could cause code injection CVE-2025-233057.8NVIDIA Megatron-LM for all platforms contains a vulnerability in the tools component, where an attacker may exploit a code injection issue. CVE-2025-233067.8NVIDIA Megatron-LM for all platforms contains a vulnerability in the megatron/training/ arguments.py component where an attacker could causeCVE-2025-233077.8NVIDIA NeMo Curator for all platforms contains a vulnerability where a malicious file created by an attacker could allow code injection. A sCVE-2025-233087.8NVIDIA CUDA Toolkit for all platforms contains a vulnerability in nvdisasm where an attacker may cause a heap-based buffer overflow by gettiCVE-2025-233098.2NVIDIA Display Driver contains a vulnerability where an uncontrolled DLL loading path might lead to arbitrary denial of service, escalation CVE-2025-23316.5The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions uCVE-2025-233109.8NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where an attacker could cause stack buffer overflow by specialCVE-2025-233119.8NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a stack overflow through specially crafted HTTP reques