GPU VulnDB

Database/NVIDIA / GPU stack

NVIDIA HGX / DGX (Hopper and Blackwell) - NVSwitch LS10 firmware: A misconfiguration of the LS10 NVSwitch lets an

CVSS 4.2CVE-2025-23302NVIDIA / GPU stackcurated

Impact

A misconfiguration of the LS10 NVSwitch lets an attacker set an unsafe debug access level on the fabric switch itself. The NVSwitch is the component that enforces which GPU can address which peer over NVLink; anything that loosens its debug posture is a question mark over the multi-GPU partitioning that a shared HGX node depends on. Direct scored impact is denial of service with a changed scope.

Who can reach it

Local, low privileges, high complexity, from the host that manages the fabric. Fabric Manager runs here, so the practical prerequisite is code on the baseboard host - not inside a tenant VM.

What to do

Apply the NVSwitch firmware update from bulletin 5674 as part of the HGX firmware bundle. Cost: full node drain and power cycle across the whole baseboard; NVLink topology is re-established by Fabric Manager on restart, so verify fabric health and NVLink link counts after the flash before returning the node to the pool.

References

https://nvd.nist.gov/vuln/detail/CVE-2025-23302https://github.com/NVIDIA/product-security/tree/main/2025/5674

Related entries

All NVIDIA / GPU stack entries

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.