Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2025-23300

Опубликовано: 23 окт. 2025
Источник: redhat
CVSS3: 7.8
EPSS Низкий

Описание

NVIDIA Display Driver for Linux contains a vulnerability in the kernel driver, where a user could cause a null pointer dereference by allocating a specific memory resource. A successful exploit of this vulnerability might lead to denial of service.

A vulnerability exists in the Linux kernel module of the NVIDIA Display Driver. A local, low-privileged user may allocate a specifically crafted memory resource, which triggers a NULL pointer dereference in the driver

Меры по смягчению последствий

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux AI (RHEL AI)rhelai1/bootc-aws-nvidia-rhel9Will not fix
Red Hat Enterprise Linux AI (RHEL AI)rhelai1/bootc-azure-nvidia-rhel9Will not fix
Red Hat Enterprise Linux AI (RHEL AI)rhelai1/bootc-gcp-nvidia-rhel9Will not fix
Red Hat Enterprise Linux AI (RHEL AI)rhelai1/instructlab-nvidia-rhel9Will not fix

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-476
https://bugzilla.redhat.com/show_bug.cgi?id=2406089nvidia-display-driver: NVIDIA Display Driver Null pointer dereference

EPSS

Процентиль: 11%
0.00036
Низкий

7.8 High

CVSS3

Связанные уязвимости

CVSS3: 5.5
ubuntu
5 месяцев назад

NVIDIA Display Driver for Linux contains a vulnerability in the kernel driver, where a user could cause a null pointer dereference by allocating a specific memory resource. A successful exploit of this vulnerability might lead to denial of service.

CVSS3: 5.5
nvd
5 месяцев назад

NVIDIA Display Driver for Linux contains a vulnerability in the kernel driver, where a user could cause a null pointer dereference by allocating a specific memory resource. A successful exploit of this vulnerability might lead to denial of service.

CVSS3: 5.5
debian
5 месяцев назад

NVIDIA Display Driver for Linux contains a vulnerability in the kernel ...

CVSS3: 5.5
github
5 месяцев назад

NVIDIA Display Driver for Linux contains a vulnerability in the kernel driver, where a user could cause a null pointer dereference by allocating a specific memory resource. A successful exploit of this vulnerability might lead to denial of service.

CVSS3: 5.5
fstec
6 месяцев назад

Уязвимость компонента Kernel Driver драйвера программного обеспечения графического процессора NVIDIA GPU Display Driver, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 11%
0.00036
Низкий

7.8 High

CVSS3