CVE-2025-23332

MediumCVSS 5.0/10Last modified Oct 18, 2026

Description

NVIDIA Display Driver for Linux contains a vulnerability in a kernel module, where an attacker might be able to trigger a null pointer deference. A successful exploit of this vulnerability might lead to denial of service.

Metrics

CVSS 3.1 5.0/10CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-476

Affected software

VendorProductVersions
NVIDIAVirtual GPU Manager580.82.02(All versions prior to and including vGPU 19.1)
NVIDIAVirtual GPU Manager570.172.07(All versions prior to and including vGPU 18.4)
NVIDIAVirtual GPU Manager535.261.04(All versions prior to and including vGPU 16.11)
NVIDIAGeForceAll driver versions prior to 580.95.05
NVIDIAGeForceAll driver versions prior to 570.195.03
NVIDIAGeForceAll driver versions prior to 535.274.02
NVIDIANVIDIA RTX, Quadro, NVSAll driver versions prior to 580.95.05
NVIDIANVIDIA RTX, Quadro, NVSAll driver versions prior to 570.195.03
NVIDIANVIDIA RTX, Quadro, NVSAll driver versions prior to 535.274.02
NVIDIATeslaAll driver versions prior to 580.95.05
NVIDIATeslaAll driver versions prior to 570.195.03
NVIDIATeslaAll driver versions prior to 535.274.02
NVIDIAGuest driver580.82.07(All versions prior to and including vGPU 19.1)
NVIDIAGuest driver580.82.07(All versions up to and including the August 2025 release)
NVIDIAGuest driver570.172.08(All versions prior to and including vGPU 18.4)
NVIDIAGuest driver535.261.03(All versions prior to and including vGPU 16.11)

References

Timeline

Published
Oct 23, 2025
Last modified
Oct 18, 2026
NVD status
Deferred

Related CVEs from 2025

CVE-2025-233337.5NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability in the Python backend, where an attacker could cause an out-ofCVE-2025-233347.5NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability in the Python backend, where an attacker could cause an out-ofCVE-2025-233357.5NVIDIA Triton Inference Server for Windows and Linux and the Tensor RT backend contain a vulnerability where an attacker could cause an undeCVE-2025-233367.5NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where an attacker could cause a denial of service by loading aCVE-2025-233376.7NVIDIA HGX & DGX GB200, GB300, B300 contain a vulnerability in the HGX Management Controller (HMC) that may allow a malicious actor with adCVE-2025-233385.5NVIDIA CUDA Toolkit for all platforms contains a vulnerability in nvdisasm where a user may cause an out-of-bounds write by running nvdisasmCVE-2025-233397.8NVIDIA CUDA Toolkit for all platforms contains a vulnerability in cuobjdump where an attacker may cause a stack-based buffer overflow by getCVE-2025-23349.1A vulnerability classified as problematic has been found in 274056675 springboot-openai-chatgpt e84f6f5. This affects the function deleteChaCVE-2025-233403.3NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the nvdisasm binary where a user may cause an out-of-bounds read by passinCVE-2025-233429.8The NVIDIA NVDebug tool contains a vulnerability that may allow an actor to gain access to a privileged account . A successful exploit of thCVE-2025-233439.8The NVIDIA NVDebug tool contains a vulnerability that may allow an actor to write files to restricted components. A successful exploit of thCVE-2025-233449.8The NVIDIA NVDebug tool contains a vulnerability that may allow an actor to run code on the platform host as a non-privileged user. A succes
CVE-2025-23332: Medium severity, CVSS 5.0 | Vulnix