CVE-2025-23263

Published: Jul 17, 2025Modified: Jun 17, 2026Deferred

7.6

Vector

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H

Exploitability: 2.1 / Impact: 5.5

Source: psirt@nvidia.com (Secondary)

Description

NVIDIA DOCA-Host and Mellanox OFED contain a vulnerability in the VGT+ feature, where an attacker on a VM might cause escalation of privileges and denial of service on the VLAN.

Related CWEs

CWE-279

Incorrect Execution-Assigned Permissions

While it is executing, the product sets the permissions of an object in a way that violates the intended permissions that have been specified by the user.

References (1)

https://nvidia.custhelp.com/app/answers/detail/a_id/5654

Source: psirt@nvidia.com

Timeline

No history available yet.