CVE-2025-23332

State: Published
Severity: 5.0 Medium
Published: Oct 23, 2025
Updated: Oct 23, 2025
Reserved: Jan 14, 2025

Description

NVIDIA Display Driver for Linux contains a vulnerability in a kernel module, where an attacker might be able to trigger a null pointer deference. A successful exploit of this vulnerability might lead to denial of service.

Scores

CVSS	Score	Vector	Source
3.1	5.0 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H	nvidia

Weaknesses

CWE-476 NULL Pointer Dereference

Affected Products

Product	Versions
Virtual GPU ManagerNVIDIA	580.82.02(All versions prior to and including vGPU 19.1)Affected
Virtual GPU ManagerNVIDIA	570.172.07(All versions prior to and including vGPU 18.4)Affected
Virtual GPU ManagerNVIDIA	535.261.04(All versions prior to and including vGPU 16.11)Affected
GeForceNVIDIA	All driver versions prior to 580.95.05Affected
GeForceNVIDIA	All driver versions prior to 570.195.03Affected
GeForceNVIDIA	All driver versions prior to 535.274.02Affected
NVIDIA RTX, Quadro, NVSNVIDIA	All driver versions prior to 580.95.05Affected
NVIDIA RTX, Quadro, NVSNVIDIA	All driver versions prior to 570.195.03Affected
NVIDIA RTX, Quadro, NVSNVIDIA	All driver versions prior to 535.274.02Affected
TeslaNVIDIA	All driver versions prior to 580.95.05Affected
TeslaNVIDIA	All driver versions prior to 570.195.03Affected
TeslaNVIDIA	All driver versions prior to 535.274.02Affected
Guest driverNVIDIA	580.82.07(All versions prior to and including vGPU 19.1)Affected
Guest driverNVIDIA	580.82.07(All versions up to and including the August 2025 release)Affected
Guest driverNVIDIA	570.172.08(All versions prior to and including vGPU 18.4)Affected
Guest driverNVIDIA	535.261.03(All versions prior to and including vGPU 16.11)Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.