NVDebug tool: Info disclosure / privesc via diagnostic tool

CVSS 4.5CVE-2025-23252NVIDIA / GPU stackcurated

Impact

Info disclosure / privesc via diagnostic tool

Who can reach it

Local operator

What to do

Upgrade NVDebug on nodes

References

https://nvd.nist.gov/vuln/detail/CVE-2025-23252 https://github.com/NVIDIA/product-security/tree/main/2025/5651

Related entries

CUDA Toolkit: Info disclosure (buffer over-read)CVE-2025-23274 · CUDA ToolkitMedium
NVIDIA vGPU Manager (vGPU plugin): An index value from the guest is not validated by the vGPU plugin, letting oneCVE-2019-5698 · NVIDIA vGPU Manager (vGPU plugin)Medium
NVIDIA vGPU software (guest kernel-mode driver + vGPU plugin): The vGPU plugin lets guest code reach privilegedCVE-2020-5973 · NVIDIA vGPU software (guest kernel-mode driver + vGPU plugin)Medium
NVIDIA Windows GPU Display Driver (nvlddmkm.sys): No rate limiting in the kernel-mode scheduler: a local process floodsCVE-2020-5982 · NVIDIA Windows GPU Display Driver (nvlddmkm.sys)Medium
NVIDIA vGPU Manager (vGPU plugin): Another guest-reachable NULL dereference in the vGPU plugin causing denial ofCVE-2021-1103 · NVIDIA vGPU Manager (vGPU plugin)Medium
NVIDIA CUDA Toolkit - cuobjdump: A stack-based buffer overflow on a malformed input file yields limited denialCVE-2022-34667 · NVIDIA CUDA Toolkit - cuobjdumpMedium

All NVIDIA / GPU stack entries

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.