Stack Buffer Overflow in NVIDIA vGPU Software for Linux Hypervisors
CVE-2025-23283

7.8HIGH

Key Information:

Vendor

Nvidia
Status
Gpu Display Drivers
Vendor
CVE Published:
2 August 2025

What is CVE-2025-23283?

NVIDIA vGPU software for Linux-style hypervisors is susceptible to a stack buffer overflow vulnerability within the Virtual GPU Manager. This flaw can be exploited by a malicious guest, potentially resulting in unauthorized code execution, service disruptions, and issues with data integrity or confidentiality. Proper safeguards and timely updates are essential to mitigate the risks associated with this vulnerability.

Affected Version(s)

GPU Display Drivers R535, R570

References

https://nvidia.custhelp.com/app/answers/detail/a_id/5670

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-23283 : Stack Buffer Overflow in NVIDIA vGPU Software for Linux Hypervisors