CVE-2025-23282

kvm: From CVEorg collector

Published Oct 10, 2025 CVSS 3.1 · 7 High EPSS < 1% KEV · Not listed
Description
NVIDIA Display Driver for Linux contains a vulnerability where an attacker might be able to use a race condition to escalate privileges. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DLA Debian DLA DLA-4752-1 nvidia-graphics-drivers new upstream security update
Debian DLA Debian DLA DLA-4753-1 nvidia-graphics-drivers new upstream security update
History
Type Values Removed Values Added
First Time appeared Linux
Linux linux
Nvidia
Nvidia display Driver
Nvidia driver
Vendors & Products Linux
Linux linux
Nvidia
Nvidia display Driver
Nvidia driver
Type Values Removed Values Added
Title kvm: From CVEorg collector
Metrics threat_severity

None

threat_severity

Important

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Type Values Removed Values Added
Description NVIDIA Display Driver for Linux contains a vulnerability where an attacker might be able to use a race condition to escalate privileges. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure.
Weaknesses CWE-415
References
Metrics cvssV3_1

{'score': 7, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'}

Weaknesses

Sources

Status
PUBLISHED
Assigner
nvidia
Published
Updated
Feb 26, 2026, 5:47 PM
Reserved
Jan 14, 2025, 1:06 AM
Status
Deferred
Published
Oct 10, 2025, 6:15 PM
Modified
Oct 18, 2026, 9:10 PM
Severity
Important
Public date
Oct 10, 2025, 5:41 PM