PT-2025-18650 · Nvidia+1 · Nvidia Vgpu+1

Published 2025-04-30 · Updated 2025-10-30 · CVE-2025-23246

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions NVIDIA vGPU software for Windows and Linux (affected versions not specified)

Description The issue is related to a vulnerability in the Virtual GPU Manager (vGPU plugin) that allows a guest to consume uncontrolled resources. A successful exploit of this issue might lead to denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this issue.

Fix

DoS

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

BDU:2025-10370

CVE-2025-23246

Affected Products

Nvidia Vgpu

Red Os

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2025-23246 · Security Note
• https://bdu.fstec.ru/vul/2025-10370 · Security Note
• https://twitter.com/CVEnew/status/1918014599435010260 · Twitter Post
• https://redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti/mnozhestvennye-uyazvimosti-nvidia-container-toolkit-cve-2024-0133-cve-2025-23245-cve-2025-23246 · Note
• https://nvidia.custhelp.com/app/answers/detail/a_id/5630 · Note
• https://redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti/mnozhestvennye-uyazvimosti-nvidia-container-cve-2024-0133-cve-2025-23245-cve-2025-23246 · Note
• https://t.me/cvedetector/24236 · Telegram Post
• https://redos.red-soft.ru/support/secure/uyazvimosti/mnozhestvennye-uyazvimosti-nvidia-container-cve-2024-0133-cve-2025-23245-cve-2025-23246/?sphrase_id=1338963 · Note