CVE-2025-33219

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

NVIDIA Display Driver for Linux contains a vulnerability in the NVIDIA kernel module where an attacker could cause an integer overflow or wraparound. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, or information disclosure.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-190

Affected software

VendorProductVersions
NVIDIAGeForceAll driver versions prior to 590.48.01
NVIDIAGeForceAll driver versions prior to 580.126.09
NVIDIAGeForceAll driver versions prior to 570.211.01
NVIDIAGeForceAll driver versions prior to 535.288.01
NVIDIARTX PRO, RTX, QuadroAll driver versions prior to 590.48.01
NVIDIARTX PRO, RTX, QuadroAll driver versions prior to 580.126.09
NVIDIARTX PRO, RTX, QuadroAll driver versions prior to 570.211.01
NVIDIARTX PRO, RTX, QuadroAll driver versions prior to 535.288.01
NVIDIATeslaAll driver versions prior to 590.48.01
NVIDIATeslaAll driver versions prior to 580.126.09
NVIDIATeslaAll driver versions prior to 570.211.01
NVIDIATeslaAll driver versions prior to 535.288.01
NVIDIAGuest driver580.105.08(All versions prior to and including vGPU software 19.3)
NVIDIAGuest driver570.195.03(All versions prior to and including vGPU software 18.5)
NVIDIAGuest driver535.274.02(All versions prior to and including vGPU software 16.12)
NVIDIAVirtual GPU Manager580.105.06(All versions prior to and including vGPU software 19.3)
NVIDIAVirtual GPU Manager570.195.02(All versions prior to and including vGPU software 18.5)
NVIDIAVirtual GPU Manager535.274.03(All versions prior to and including vGPU software 16.12)
NVIDIAGuest driver580.105.08(All versions up to and including the November 2025 release)
NVIDIAVirtual GPU Manager580.105.06(All versions up to and including the November 2025 release)

References

Timeline

Published
Jan 28, 2026
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2025

CVE-2025-332210.0An improper neutralization of inputs used in expression language allows remote code execution with the highest privileges on the server.CVE-2025-332207.8NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a malicious guest could cause heap memory access after the mCVE-2025-332216.0NVIDIA Display Driver for Windows and Linux contains a vulnerability in the kernel driver, where a user could cause an incorrect permission CVE-2025-332229.8NVIDIA Isaac Launchable contains a vulnerability where an attacker could exploit a hard-coded credential issue. A successful exploit of thisCVE-2025-332239.8NVIDIA Isaac Launchable contains a vulnerability where an attacker could cause an execution with unnecessary privileges. A successful exploiCVE-2025-332249.8NVIDIA Isaac Launchable contains a vulnerability where an attacker could cause an execution with unnecessary privileges. A successful exploiCVE-2025-332258.4NVIDIA Resiliency Extension for Linux contains a vulnerability in log aggregation, where an attacker could cause predictable log-file names.CVE-2025-332267.8NVIDIA NeMo Framework for all platforms contains a vulnerability where malicious data created by an attacker may cause a code injection. A sCVE-2025-332287.3NVIDIA Nsight Systems contains a vulnerability in the gfx_hotspot recipe, where an attacker could cause an OS command injection by supplyingCVE-2025-332297.3NVIDIA Nsight Visual Studio for Windows contains a vulnerability in Nsight Monitor where an attacker can execute arbitrary code with the samCVE-2025-33238.8A vulnerability classified as critical was found in godcheese/code-projects Nimrod 0.8. Affected by this vulnerability is the function searcCVE-2025-332307.3NVIDIA Nsight Systems for Linux contains a vulnerability in the .run installer, where an attacker could cause an OS command injection by sup
CVE-2025-33219: High severity, CVSS 7.8 | Vulnix