NVIDIA has released a software security update for its GPU Display Driver to fix multiple vulnerabilities affecting both the driver and NVIDIA VGPU Software on various operating systems. The security bulletin lists various identified Common Vulnerabilities and Exposures (CVEs).
The NVIDIA GPU Driver for Linux has a vulnerability (CVE-2025-23244) that could let an unprivileged attacker escalate permissions. Exploiting this flaw may result in code execution, service disruptions, privilege escalation, information leaks, and data tampering.
By infosecbulletin
/ Saturday , May 17 2025
A new class of vulnerabilities in Intel processors, called Branch Predictor Race Conditions (BPRC), enables attackers to extract sensitive data...
Read More
By infosecbulletin
/ Wednesday , May 14 2025
Siemens issued a security advisory (SSA-047424) for two serious vulnerabilities—CVE-2025-26389 and CVE-2025-26390—impacting the OZW672 and OZW772 web servers. These servers...
Read More
By infosecbulletin
/ Wednesday , May 14 2025
Microsoft has released its Patch Tuesday updates for May 2025, addressing a total of 78 vulnerabilities across its product ecosystem,...
Read More
By infosecbulletin
/ Tuesday , May 13 2025
NID services in Bangladesh are temporarily suspended due to issues with delivering One-Time Passwords (OTP) needed to access the NID...
Read More
By infosecbulletin
/ Monday , May 12 2025
Google will pay about $1.4 billion to Texas to settle two lawsuits regarding location tracking and biometric data storage without...
Read More
By infosecbulletin
/ Friday , May 9 2025
YouTube has restricted access to at least four Bangladeshi television channels in India following a takedown request from the Indian...
Read More
By infosecbulletin
/ Friday , May 9 2025
Microsoft has fixed critical vulnerabilities in its core cloud services, including Azure Automation, Azure Storage, Azure DevOps, and Microsoft Power...
Read More
By infosecbulletin
/ Thursday , May 8 2025
The cyber threat landscape is rapidly changing, with a notable increase in ransomware activity in April 2025, driven by the...
Read More
By infosecbulletin
/ Thursday , May 8 2025
SonicWall has released patches for three security flaws in SMA 100 Secure Mobile Access appliances that could allow remote code...
Read More
By infosecbulletin
/ Thursday , May 8 2025
From April 2024 to April 2025, Flashpoint analysts noted that the financial sector was a major target for threat actors,...
Read More
NVIDIA VGPU software for Windows and Linux has vulnerabilities in the Virtual GPU Manager. CVE-2025-23245 lets a guest access global resources, which could cause a denial of service. Similarly, CVE-2025-23246 allows a guest to use uncontrolled resources, also resulting in a denial of service.
The vulnerabilities affect a range of NVIDIA products, including:
GeForce
NVIDIA RTX
Quadro
NVS
Tesla
Driver versions affected depend on the branch (R535, R550, R570, R575) and the operating system (Linux, Windows). Users of NVIDIA VGPU software on Citrix Hypervisor, VMware vSphere, Red Hat Enterprise Linux KVM, Ubuntu, Microsoft Azure, and Windows Server are also impacted.
NVIDIA recommends that users update their GPU Display Drivers and VGPU Software to the latest versions to address these vulnerabilities.
Users can download updates for NVIDIA GPU display drivers from the NVIDIA Driver Downloads page and also can find updates for NVIDIA VGPU Software and Cloud Gaming on the NVIDIA Licensing Portal.
‘SessionShark’ ToolKit Bypasses Microsoft Office 365 MFA