CVE-2025-33235

Published: Dec 16, 2025Modified: Jun 17, 2026

7.0

Vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.0 / Impact: 5.9

Source: NVD

Description

NVIDIA Resiliency Extension for Linux contains a vulnerability in the checkpointing core, where an attacker may cause a race condition. A successful exploit of this vulnerability might lead to information disclosure, data tampering, denial of service, or escalation of privileges.

Affected (9)

Products: Nvidia: Nvidia Resiliency Extension

Nvidia

1 product

Nvidia Resiliency Extension

Configuration A

9 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Nvidia Nvidia Resiliency Extension	Before 0.5.0
Nvidia Nvidia Resiliency Extension	Version 0.5.0 rc1
Nvidia Nvidia Resiliency Extension	Version 0.5.0 rc2
Nvidia Nvidia Resiliency Extension	Version 0.5.0 rc3
Nvidia Nvidia Resiliency Extension	Version 0.5.0 rc4
Nvidia Nvidia Resiliency Extension	Version 0.5.0 rc5
Nvidia Nvidia Resiliency Extension	Version 0.5.0 rc6
Nvidia Nvidia Resiliency Extension	Version 0.5.0 rc7
Nvidia Nvidia Resiliency Extension	Version 0.5.0 rc8

Running on/with	Platform Versions
Linux Linux Kernel	All versions

Related CWEs

CWE-362

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

The product contains a code sequence that can run concurrently with other code, and the code sequence requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence that is operating concurrently.

References (3)

https://nvd.nist.gov/vuln/detail/CVE-2025-33235

Source: psirt@nvidia.com

US Government ResourceVDB Entry

https://nvidia.custhelp.com/app/answers/detail/a_id/5746

Source: psirt@nvidia.com

PatchVendor Advisory

https://www.cve.org/CVERecord?id=CVE-2025-33235

Source: psirt@nvidia.com

Third Party Advisory

Timeline

No history available yet.