Local Kernel Memory Corruption Vulnerability in NVIDIA DGX H100 BMC

CVE-2023-25527

What is CVE-2023-25527?

The NVIDIA DGX H100 BMC is susceptible to a local vulnerability through the host KVM daemon, allowing an authenticated attacker to manipulate kernel memory. Exploiting this weakness may result in the execution of arbitrary kernel code, potential denial of service, privilege escalation, and even unauthorized access to sensitive information, leading to data tampering.

References