NVIDIA fixes 6 vulnerabilities in various products

Do you think this report is well-written? *

Yes

Do you use this technology? *

Yes

Was this report useful to you?

Yes

We would be happy if you would describe:

The security services provided by CESNET are designed to provide significant support in ensuring the cybersecurity of connected organizations. Although we strive to provide quality and reliable services, it is not possible to guarantee absolute coverage of all security vulnerabilities. Our services should be seen as a complement to an organization's own security management, not as a replacement. The client bears ultimate responsibility for securing their environment.

This report was translated by AI; nobody has reviewed the translation yet. Original language: Slovak.

[TLP:CLEAR] NVIDIA fixes 6 vulnerabilities in various products

Nvidia fixes 6 vulnerabilities in various products [1]. Products and their fixed versions [1]: NVIDIA DOCA collectx-clxapidev - 3.0.0, 2.9.3 NVIDIA DOCA collectx-dpserver - 3.0.0, 2.5.4, 2.9.3 BlueField GA - 45.1020 BlueField LTS22 - 35.4554 BlueField LTS23 - 39.5050 BlueField LTS24 - 43.3608 ConnectX GA - 45.1020 ConnectX LTS22 - 35.4554 ConnectX LTS23 - 39.5050 ConnectX LTS24 - 43.3608 ConnectX-4 - 12.28.4704 (published by the end of September) ConnectX-4 LX - 14.32.1908 (published by the end of September) Mellanox DPDK (GA) - 22.11_2504.1.0 Mellanox DPDK (LTS) - 20.11.7.9.0, 22.11_2410.4.0, 22.11_2310.6.0 DPDK (Upstream) - 25.07 DPDK (Upstream LTS) - 24.11.3, 23.11.5, 22.11.10 NVOS NVSwitch - 25.02.42xx NVOS IBSwitch - 25.02.4xxx Cumulus Linux - 5.13, 5.11.0.0026, 5.11.1.1009, 5.9.2.0020, 5.9.0.0032

NVIDIA BlueField - configuration alteration (CVE-2025-23256)

CVSS 8.7 (High)

An authenticated local attacker can modify the configuration without authorization in the management interface of NVIDIA BlueField [1].

The vulnerability is present in products:

NVIDIA BlueField GA; 45.1020;
NVIDIA BlueField LTS22; 35.4554;
NVIDIA BlueField LTS23; 39.5050;
NVIDIA BlueField LTS24; 43.3608;

CVSS: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:H

More information:

CVE-2025-23256 at cve.org, NVD
CWE-863: Incorrect Authorization at cwe.mitre.org

The vulnerability was publicly disclosed 3. 9. 2025.

NVIDIA DOCA collectx-clxapidev (Debian) - privilege escalation (CVE-2025-23257)

CVSS 7.3 (High)

An authenticated remote attacker can escalate their privileges in NVIDIA DOCA collectx-clxapidev (Debian) [1].

The vulnerability is present in product:

Debian:NVIDIA DOCA collectx-clxapidev; >=2.9, <2.9.3; >=2.10, <3.0;

CVSS: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

More information:

CVE-2025-23257 at cve.org, NVD
CWE-732: Incorrect Permission Assignment for Critical Resource at cwe.mitre.org

The vulnerability was publicly disclosed 3. 9. 2025.

NVIDIA DOCA collectx-dpeserver (Debian arm64) - privilege escalation (CVE-2025-23258)

CVSS 7.3 (High)

An authenticated remote attacker can escalate their privileges in NVIDIA DOCA collectx-dpeserver (Debian arm64) [1].

The vulnerability is present in product:

Debian:NVIDIA DOCA collectx-dpeserver; >=2.5, <2.5.4; >=2.9, <2.9.3; >=2.10, <3.0;

CVSS: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

More information:

CVE-2025-23258 at cve.org, NVD

NVIDIA ConnectX - configuration alteration (CVE-2025-23262)

CVSS 7.6 (High)

An authenticated adjacent attacker can modify the configuration without authorization in the management interface of NVIDIA ConnectX [1].

The vulnerability is present in products:

NVIDIA ConnectX GA; <45.1020;
NVIDIA ConnectX LTS22; <35.4554
NVIDIA ConnectX LTS23; <39.5050;
NVIDIA ConnectX LTS24; <43.3608;
NVIDIA ConnectX-4; <12.28.4704;
NVIDIA ConnectX-4 LX; <14.32.1908;

CVSS: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H

More information:

CVE-2025-23262 at cve.org, NVD
CWE-863: Incorrect Authorization at cwe.mitre.org

The vulnerability was publicly disclosed 3. 9. 2025.

NVIDIA Mellanox DPDK - DoS, information disclosure (CVE-2025-23259)

CVSS 7.6 (High)

An authenticated adjacent attacker in a virtual machine can carry out a DoS attack and gain unauthorized access to information in NVIDIA Mellanox DPDK [1].

The vulnerability is present in products:

DPDK (Mellanox); >=22.11, <22.11_2504.1.0;
DPDK (Mellanox LTS); >=20.11, <20.11_7.8.0; >=22.11, <22.11_2310; >=22.11, <22.11_2410;
DPDK; >=25.00, <25.07;
DPDK (LTS); >=22.11, <22.11.10; >=23.11, <23.11.5; >=24.11, <24.11.3;

CVSS: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H

More information:

CVE-2025-23259 at cve.org, NVD
CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') at cwe.mitre.org

The vulnerability was publicly disclosed 3. 9. 2025.

NVIDIA Cumulus (Linux), NVOS - password hash leak (CVE-2025-23261)

CVSS 7.6 (High)

An authenticated adjacent attacker can view password hashes from logs without authorization in NVIDIA Cumulus (Linux) and NVOS [1].

The vulnerability is present in products:

Linux:NVIDIA Cumulus >=5.12, <5.13; >=5.11.0, <5.11.0.0026; >=5.11.1, <5.11.1.1009; >=5.9.2, <5.9.2.0020; <5.9.0.0032;
NVIDIA NVOS; >=25.02.21, <25.02.24;

CVSS: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H

More information:

CVE-2025-23261 at cve.org, NVD
CWE-532: Insertion of Sensitive Information into Log File at cwe.mitre.org

The vulnerability was publicly disclosed 3. 9. 2025.

Report feedback

[TLP:CLEAR] NVIDIA fixes 6 vulnerabilities in various products

NVIDIA BlueField - configuration alteration (CVE-2025-23256)

CVSS 8.7 (High)

NVIDIA DOCA collectx-clxapidev (Debian) - privilege escalation (CVE-2025-23257)

CVSS 7.3 (High)

NVIDIA DOCA collectx-dpeserver (Debian arm64) - privilege escalation (CVE-2025-23258)

CVSS 7.3 (High)

NVIDIA ConnectX - configuration alteration (CVE-2025-23262)

CVSS 7.6 (High)

NVIDIA Mellanox DPDK - DoS, information disclosure (CVE-2025-23259)

CVSS 7.6 (High)

NVIDIA Cumulus (Linux), NVOS - password hash leak (CVE-2025-23261)

CVSS 7.6 (High)

Links