CVE-2023-25516

Summary

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where an unprivileged user can cause an integer overflow, which may lead to information disclosure and denial of service.

Affected Software

VendorProductVersion RangeStatus
NVIDIAGPU Display Driver for LinuxAll versions prior to and including 15.2, 13.7, and 11.12, and all versions prior to and including the May 2023 releaseaffected

Weaknesses

  • CWE-190: CWE-190 Integer Overflow or Wraparound

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References