PT-2025-31747 · Nvidia+2 · Nvidia-Graphics-Drivers-Tesla-418+7

Published 2025-01-01 · Updated 2025-12-09 · CVE-2025-23279

Positive Technologies (AI Summary)

CVSS v3.1

7.0

High

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions nvidia-graphics-drivers nvidia-graphics-drivers-legacy-390xx nvidia-graphics-drivers-tesla-418 nvidia-graphics-drivers-tesla-470 nvidia-graphics-drivers-tesla-535 nvidia-open-gpu-kernel-modules

Description The NVIDIA .run Installer for Linux and Solaris contains a flaw where a race condition may allow an attacker to escalate privileges. Exploitation of this issue could result in code execution, privilege escalation, information disclosure, denial of service, or data tampering.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

DoS

Time Of Check To Time Of Use

Weakness Enumeration

CWE-367

Related Identifiers

BDU:2025-09446

CVE-2025-23279

ECHO-E9C4-FB81-4A6A

OPENSUSE-SU-2025:15431-1

OPENSUSE-SU-2025:15804-1

SUSE-SU-2025:03062-1

SUSE-SU-2025:03246-1

SUSE-SU-2025:03247-1

SUSE-SU-2025:03424-1

SUSE-SU-2025:20741-1

SUSE-SU-2025:20757-1

SUSE-SU-2025_03062-1

SUSE-SU-2025_03246-1

SUSE-SU-2025_03247-1

SUSE-SU-2025_03424-1

Affected Products

Debian

Suse

Nvidia Graphics Drivers

Nvidia-Graphics-Drivers-Legacy-390Xx

Nvidia-Graphics-Drivers-Tesla-418

Nvidia-Graphics-Drivers-Tesla-470

Nvidia-Graphics-Drivers-Tesla-535

Nvidia-Open-Gpu-Kernel-Modules

References · 56

• https://osv.dev/vulnerability/SUSE-SU-2025:03062-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-09446 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:03247-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:20757-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-23279 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:03424-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:20741-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:15804-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:15431-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-23279 · Security Note
• https://osv.dev/vulnerability/CVE-2025-23279 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:03246-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-23279 · Vendor Advisory
• https://t.me/CVEtracker/29026 · Telegram Post
• https://bugzilla.suse.com/1243192 · Note