CVE-2025-33225

Published: Dec 16, 2025Modified: Jun 17, 2026

8.4

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.5 / Impact: 5.9

Source: psirt@nvidia.com (Secondary)

Description

NVIDIA Resiliency Extension for Linux contains a vulnerability in log aggregation, where an attacker could cause predictable log-file names. A successful exploit of this vulnerability may lead to escalation of privileges, code execution, denial of service, information disclosure, and data tampering.

Affected (9)

Products: Nvidia: Nvidia Resiliency Extension

Nvidia

1 product

Nvidia Resiliency Extension

Configuration A

9 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Nvidia Nvidia Resiliency Extension	version < 0.5.0
Nvidia Nvidia Resiliency Extension	Version 0.5.0 rc1
Nvidia Nvidia Resiliency Extension	Version 0.5.0 rc2
Nvidia Nvidia Resiliency Extension	Version 0.5.0 rc3
Nvidia Nvidia Resiliency Extension	Version 0.5.0 rc4
Nvidia Nvidia Resiliency Extension	Version 0.5.0 rc5
Nvidia Nvidia Resiliency Extension	Version 0.5.0 rc6
Nvidia Nvidia Resiliency Extension	Version 0.5.0 rc7
Nvidia Nvidia Resiliency Extension	Version 0.5.0 rc8

Running on/with	Platform Versions
Linux Linux Kernel	All versions

Related CWEs

CWE-61

UNIX Symbolic Link (Symlink) Following

The product, when opening a file or directory, does not sufficiently account for when the file is a symbolic link that resolves to a target outside of the intended control sphere. This could allow an attacker to cause the product to operate on unauthorized files.

References (3)

https://nvd.nist.gov/vuln/detail/CVE-2025-33225

Source: psirt@nvidia.com

US Government ResourceVDB Entry

https://nvidia.custhelp.com/app/answers/detail/a_id/5746

Source: psirt@nvidia.com

PatchVendor Advisory

https://www.cve.org/CVERecord?id=CVE-2025-33225

Source: psirt@nvidia.com

Third Party Advisory

Timeline

No history available yet.