GPU VulnDB

Database/NVIDIA / GPU stack

Intel Gaudi software suite (SynapseAI stack): An authenticated local user can drive the Gaudi software stack

CVE-2025-27249NVIDIA / GPU stackcurated

Impact

An authenticated local user can drive the Gaudi software stack into unbounded resource consumption and deny the accelerator to everything else on the node. On a bin-packed training cluster that is one tenant stalling a whole 8-card box.

Who can reach it

A local authenticated user on the node, which on most Gaudi deployments means anyone with a container that has the Gaudi devices mapped in.

What to do

Upgrade the Gaudi software suite to 1.21.0 or later. Userspace and driver package update; plan a node drain because the habanalabs driver has to be reloaded, but no BIOS or accelerator firmware flash is required.

References

https://nvd.nist.gov/vuln/detail/CVE-2025-27249https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01374.html

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.