CVE-2024-0141

Published: Mar 5, 2025Modified: Jun 17, 2026Deferred

6.8

Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H

Exploitability: 2.3 / Impact: 4.0

Source: psirt@nvidia.com (Secondary)

Description

NVIDIA Hopper HGX for 8-GPU contains a vulnerability in the GPU vBIOS that may allow a malicious actor with tenant level GPU access to write to an unsupported registry causing a bad state. A successful exploit of this vulnerability may lead to denial of service.

Related CWEs

CWE-782

Exposed IOCTL with Insufficient Access Control

The product implements an IOCTL with functionality that should be restricted, but it does not properly enforce access control for the IOCTL.

References (1)

https://nvidia.custhelp.com/app/answers/detail/a_id/5561

Source: psirt@nvidia.com

Timeline

No history available yet.