CVE-2025-23282 (CNNVD-202510-1424)

HIGH
中文标题:
NVIDIA Display Driver for Linux 资源管理错误漏洞
英文标题:
NVIDIA Display Driver for Linux contains a vulnerability where an attacker might be able to use a ra...
CVSS分数: 7.0
发布时间: 2025-10-10 17:41:55
漏洞类型: 资源管理错误
状态: PUBLISHED
数据质量分数: 0.30
数据版本: v3
漏洞描述
中文描述:

NVIDIA Display Driver for Linux是美国英伟达（NVIDIA）公司的一款显卡驱动程序。 NVIDIA Display Driver for Linux存在资源管理错误漏洞，该漏洞源于竞争条件，可能导致代码执行、权限提升、数据篡改、拒绝服务和信息泄露。

英文描述:

NVIDIA Display Driver for Linux contains a vulnerability where an attacker might be able to use a race condition to escalate privileges. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure.

CWE类型:
CWE-415
标签:
（暂无数据）
受影响产品
厂商 产品 版本 版本范围 平台 CPE
NVIDIA Virtual GPU Manager 580.82.02(All versions up to and including the August 2025 release) - - cpe:2.3:a:nvidia:virtual_gpu_manager:580.82.02(all_versions_up_to_and_including_the_august_2025_release):*:*:*:*:*:*:*
NVIDIA Virtual GPU Manager 580.82.02(All versions prior to and including vGPU 19.1) - - cpe:2.3:a:nvidia:virtual_gpu_manager:580.82.02(all_versions_prior_to_and_including_vgpu_19.1):*:*:*:*:*:*:*
NVIDIA Virtual GPU Manager 570.172.07(All versions prior to and including vGPU 18.4) - - cpe:2.3:a:nvidia:virtual_gpu_manager:570.172.07(all_versions_prior_to_and_including_vgpu_18.4):*:*:*:*:*:*:*
NVIDIA Virtual GPU Manager 535.261.04(All versions prior to and including vGPU 16.11) - - cpe:2.3:a:nvidia:virtual_gpu_manager:535.261.04(all_versions_prior_to_and_including_vgpu_16.11):*:*:*:*:*:*:*
NVIDIA GeForce All driver versions prior to 580.95.05 - - cpe:2.3:a:nvidia:geforce:all_driver_versions_prior_to_580.95.05:*:*:*:*:*:*:*
NVIDIA GeForce All driver versions prior to 570.195.03 - - cpe:2.3:a:nvidia:geforce:all_driver_versions_prior_to_570.195.03:*:*:*:*:*:*:*
NVIDIA GeForce All driver versions prior to 535.274.02 - - cpe:2.3:a:nvidia:geforce:all_driver_versions_prior_to_535.274.02:*:*:*:*:*:*:*
NVIDIA NVIDIA RTX, Quadro, NVS All driver versions prior to 580.95.05 - - cpe:2.3:a:nvidia:nvidia_rtx,_quadro,_nvs:all_driver_versions_prior_to_580.95.05:*:*:*:*:*:*:*
NVIDIA NVIDIA RTX, Quadro, NVS All driver versions prior to 570.195.03 - - cpe:2.3:a:nvidia:nvidia_rtx,_quadro,_nvs:all_driver_versions_prior_to_570.195.03:*:*:*:*:*:*:*
NVIDIA NVIDIA RTX, Quadro, NVS All driver versions prior to 535.274.02 - - cpe:2.3:a:nvidia:nvidia_rtx,_quadro,_nvs:all_driver_versions_prior_to_535.274.02:*:*:*:*:*:*:*
NVIDIA Tesla All driver versions prior to 580.95.05 - - cpe:2.3:a:nvidia:tesla:all_driver_versions_prior_to_580.95.05:*:*:*:*:*:*:*
NVIDIA Tesla All driver versions prior to 570.195.03 - - cpe:2.3:a:nvidia:tesla:all_driver_versions_prior_to_570.195.03:*:*:*:*:*:*:*
NVIDIA Tesla All driver versions prior to 535.274.02 - - cpe:2.3:a:nvidia:tesla:all_driver_versions_prior_to_535.274.02:*:*:*:*:*:*:*
NVIDIA Guest driver 580.82.07(All versions prior to and including vGPU 19.1) - - cpe:2.3:a:nvidia:guest_driver:580.82.07(all_versions_prior_to_and_including_vgpu_19.1):*:*:*:*:*:*:*
NVIDIA Guest driver 580.82.07(All versions up to and including the August 2025 release) - - cpe:2.3:a:nvidia:guest_driver:580.82.07(all_versions_up_to_and_including_the_august_2025_release):*:*:*:*:*:*:*
NVIDIA Guest driver 570.172.08(All versions prior to and including vGPU 18.4) - - cpe:2.3:a:nvidia:guest_driver:570.172.08(all_versions_prior_to_and_including_vgpu_18.4):*:*:*:*:*:*:*
NVIDIA Guest driver 535.261.03(All versions prior to and including vGPU 16.11) - - cpe:2.3:a:nvidia:guest_driver:535.261.03(all_versions_prior_to_and_including_vgpu_16.11):*:*:*:*:*:*:*
解决方案
中文解决方案:
（暂无数据）
英文解决方案:
（暂无数据）
临时解决方案:
（暂无数据）
参考链接
无标题 OTHER
cve.org
访问
无标题 OTHER
cve.org
访问
无标题 OTHER
cve.org
访问
CVSS评分详情
3.1 (cna)
HIGH
7.0
CVSS向量: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
机密性
HIGH
完整性
HIGH
可用性
HIGH
时间信息
发布时间:
2025-10-10 17:41:55
修改时间:
2025-10-22 03:55:19
创建时间:
2025-11-11 15:40:13
更新时间:
2025-11-11 16:00:16
利用信息
暂无可利用代码信息
数据源详情
数据源 记录ID 版本 提取时间
CVE cve_CVE-2025-23282 2025-11-11 15:23:08 2025-11-11 07:40:13
NVD nvd_CVE-2025-23282 2025-11-11 15:01:05 2025-11-11 07:48:03
CNNVD cnnvd_CNNVD-202510-1424 2025-11-11 15:12:29 2025-11-11 08:00:16
版本与语言
当前版本: v3
主要语言: EN
支持语言:
EN ZH
安全公告
暂无安全公告信息
变更历史
v3 CNNVD
2025-11-11 16:00:16
vulnerability_type: 未提取 → 资源管理错误; cnnvd_id: 未提取 → CNNVD-202510-1424; data_sources: ['cve', 'nvd'] → ['cnnvd', 'cve', 'nvd']
查看详细变更
  • vulnerability_type: 未提取 -> 资源管理错误
  • cnnvd_id: 未提取 -> CNNVD-202510-1424
  • data_sources: ['cve', 'nvd'] -> ['cnnvd', 'cve', 'nvd']
v2 NVD
2025-11-11 15:48:03
data_sources: ['cve'] → ['cve', 'nvd']
查看详细变更
  • data_sources: ['cve'] -> ['cve', 'nvd']