DGX A100 SBIOS: Improper crypto config / UI-layer restriction in SBIOS

CVSS 7.5CVE-2023-31032NVIDIA / GPU stackcurated

Impact

Improper crypto config / UI-layer restriction in SBIOS

Who can reach it

Local operator

What to do

Flash SBIOS 1.25+; node power cycle

References

https://nvd.nist.gov/vuln/detail/CVE-2023-31032 https://github.com/NVIDIA/product-security/tree/main/2024/5513

Related entries

DGX A100 SBIOS: Improper input validation in SBIOSCVE-2023-31035 · DGX A100 SBIOSHigh
DGX A100 SBIOS: Integer overflow in SBIOSCVE-2023-31034 · DGX A100 SBIOSMedium
DGX A100 SBIOS: Buffer overflow in SBIOSCVE-2023-31031 · DGX A100 SBIOSMedium
Triton Inference Server: RCE / privesc / data tampering via model-load path traversal (`--model-control explicit`)CVE-2023-31036 · Triton Inference ServerHigh
Linux kernel amdgpu GEM/VM/command-submission ioctl surface (drm/amdgpu): A NULL pointer dereference in the amdgpuCVE-2023-52883 · Linux kernel amdgpu GEM/VM/command-submission ioctl surface (drm/amdgpu)High
ChatRTX: Local privescCVE-2024-0096 · ChatRTXHigh

All NVIDIA / GPU stack entries

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.