GPU VulnDB

Database/NVIDIA / GPU stack

NVIDIA License System - Delegated Licensing Service (DLS): An authorised-looking action leads to information disclosure

CVE-2025-23291NVIDIA / GPU stackcurated

Impact

An authorised-looking action leads to information disclosure from the licensing service. Low severity and high complexity, but it is inventory data about your entire vGPU estate.

Who can reach it

Adjacent network, high privileges and user interaction required - realistically an insider or a compromised admin session.

What to do

Update the DLS appliance per bulletin 5705. Cost: appliance restart, no tenant impact.

References

https://nvd.nist.gov/vuln/detail/CVE-2025-23291https://github.com/NVIDIA/product-security/tree/main/2025/5705

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.