Access Control Vulnerabilities in NVIDIA ConnectX Network Interface Cards

CVE-2023-0205

What is CVE-2023-0205?

NVIDIA's ConnectX-5, ConnectX-6, and ConnectX6-DX models are affected by a vulnerability in the NIC firmware that allows unprivileged users to exploit insufficient granularity of access control. This may result in a denial of service, compromising the functionality of the affected network interfaces. It is critical for users to evaluate their environment and apply recommended security measures as outlined in NVIDIA's response to this issue, ensuring that their systems remain secure.

References