Megatron-LM: Local privesc / RCE via unsafe pickle deserialization
CVSS 7.8CVE-2025-33247NVIDIA / GPU stackcurated
Impact
Local privesc / RCE via unsafe pickle deserialization
Who can reach it
Malicious checkpoint
What to do
Bump Megatron-LM; rebuild training images
References
Related entries
- Megatron-LM: RCE via insecure deserializationCVE-2025-33248 · Megatron-LMHigh
- Megatron-LM: Arbitrary code execution in the training jobCVE-2025-23264 · Megatron-LMHigh
- Megatron-LM: Arbitrary code executionCVE-2025-23265 · Megatron-LMHigh
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A use-after-free in the amdgpu display core (DC/DM)CVE-2025-37903 · Linux kernel amdgpu display core (DC/DM) (drm/amd/display)High
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): An out-of-bounds access in the amdgpu display core (DC/DM)CVE-2025-38080 · Linux kernel amdgpu display core (DC/DM) (drm/amd/display)High
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): Missing or insufficient validation of user-suppliedCVE-2025-38091 · Linux kernel amdgpu display core (DC/DM) (drm/amd/display)High
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.