Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2025-23282

Опубликовано: 10 окт. 2025
Источник: redhat
CVSS3: 7
EPSS Низкий

Описание

NVIDIA Display Driver for Linux contains a vulnerability where an attacker might be able to use a race condition to escalate privileges. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure.

Меры по смягчению последствий

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 10qemu-kvmAffected
Red Hat Enterprise Linux 6qemu-kvmNot affected
Red Hat Enterprise Linux 7qemu-kvmNot affected
Red Hat Enterprise Linux 8virt-devel:rhel/qemu-kvmWill not fix
Red Hat Enterprise Linux 8virt:rhel/qemu-kvmNot affected
Red Hat Enterprise Linux 8 Advanced Virtualizationvirt:8.2/qemu-kvmNot affected
Red Hat Enterprise Linux 8 Advanced Virtualizationvirt:av/qemu-kvmNot affected
Red Hat Enterprise Linux 8 Advanced Virtualizationvirt-devel:8.2/qemu-kvmNot affected
Red Hat Enterprise Linux 9qemu-kvmNot affected
Red Hat OpenShift Container Platform 4rhcosNot affected

Показывать по

Дополнительная информация

Статус:

Important
Дефект:
CWE-415
https://bugzilla.redhat.com/show_bug.cgi?id=2403160kvm: NVIDIA Display Driver vulnerability due to race condition leading to escalate privileges

EPSS

Процентиль: 4%
0.00016
Низкий

7 High

CVSS3

Связанные уязвимости

CVSS3: 7
ubuntu
6 месяцев назад

NVIDIA Display Driver for Linux contains a vulnerability where an attacker might be able to use a race condition to escalate privileges. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure.

CVSS3: 7
nvd
6 месяцев назад

NVIDIA Display Driver for Linux contains a vulnerability where an attacker might be able to use a race condition to escalate privileges. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure.

CVSS3: 7
debian
6 месяцев назад

NVIDIA Display Driver for Linux contains a vulnerability where an atta ...

CVSS3: 7
github
6 месяцев назад

NVIDIA Display Driver for Linux contains a vulnerability where an attacker might be able to use a race condition to escalate privileges. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure.

CVSS3: 7
fstec
6 месяцев назад

Уязвимость графического драйвера NVIDIA GPU Display Driver, связанная с ошибкой повторного освобождения памяти, позволяющая нарушителю вызвать отказ в обслуживании, повысить свои привилегии, выполнить произвольный код, подделать и раскрыть защищаемую информацию

EPSS

Процентиль: 4%
0.00016
Низкий

7 High

CVSS3