NVIDIA has released a software security update for its GPU Display Driver to fix multiple vulnerabilities affecting both the driver and NVIDIA VGPU Software on various operating systems. The security bulletin lists various identified Common Vulnerabilities and Exposures (CVEs).
The NVIDIA GPU Driver for Linux has a vulnerability (CVE-2025-23244) that could let an unprivileged attacker escalate permissions. Exploiting this flaw may result in code execution, service disruptions, privilege escalation, information leaks, and data tampering.
By infosecbulletin
/ Friday , June 13 2025
HashiCorp has revealed a critical vulnerability in its Nomad tool that may let attackers gain higher privileges by misusing the...
Read More
By infosecbulletin
/ Friday , June 13 2025
SoftBank has disclosed that personal information of more than 137,000 mobile subscribers—covering names, addresses, and phone numbers—might have been leaked...
Read More
By infosecbulletin
/ Friday , June 13 2025
Serious security vulnerabilities in Trend Micro Apex One could allow attackers to inject malicious code and elevate their privileges within...
Read More
By infosecbulletin
/ Thursday , June 12 2025
Aim Labs discovered a zero-click AI vulnerability named “EchoLeak” in Microsoft 365 Copilot and reported several ways to exploit it...
Read More
By infosecbulletin
/ Wednesday , June 11 2025
On Tuesday, Adobe released security updates for 254 vulnerabilities in its software, mainly affecting Experience Manager (AEM). There are 254...
Read More
By infosecbulletin
/ Wednesday , June 11 2025
A new report from Bitsight reveals that over 40,000 internet-connected security cameras around the world are exposed, broadcasting live footage...
Read More
By infosecbulletin
/ Wednesday , June 11 2025
Microsoft's June Patch Tuesday update has arrived, addressing 66 vulnerabilities across its product line. One of these flaws was actively...
Read More
By infosecbulletin
/ Tuesday , June 10 2025
More than 84,000 Roundcube webmail installations are at risk due to CVE-2025-49113, a severe remote code execution (RCE) vulnerability that...
Read More
By infosecbulletin
/ Monday , June 9 2025
The Security Intelligence and Response Team (SIRT) at Akamai has found that multiple Mirai-based botnets are exploiting CVE-2025-24016, a critical...
Read More
By infosecbulletin
/ Sunday , June 8 2025
On June 5, 2025, CISA released seven advisories regarding Industrial Control Systems (ICS) that highlight current security issues, vulnerabilities, and...
Read More
NVIDIA VGPU software for Windows and Linux has vulnerabilities in the Virtual GPU Manager. CVE-2025-23245 lets a guest access global resources, which could cause a denial of service. Similarly, CVE-2025-23246 allows a guest to use uncontrolled resources, also resulting in a denial of service.
The vulnerabilities affect a range of NVIDIA products, including:
GeForce
NVIDIA RTX
Quadro
NVS
Tesla
Driver versions affected depend on the branch (R535, R550, R570, R575) and the operating system (Linux, Windows). Users of NVIDIA VGPU software on Citrix Hypervisor, VMware vSphere, Red Hat Enterprise Linux KVM, Ubuntu, Microsoft Azure, and Windows Server are also impacted.
NVIDIA recommends that users update their GPU Display Drivers and VGPU Software to the latest versions to address these vulnerabilities.
Users can download updates for NVIDIA GPU display drivers from the NVIDIA Driver Downloads page and also can find updates for NVIDIA VGPU Software and Cloud Gaming on the NVIDIA Licensing Portal.
‘SessionShark’ ToolKit Bypasses Microsoft Office 365 MFA