Description
NVIDIA Display Driver for Linux contains a vulnerability in the kernel driver, where a user could cause a null pointer dereference by allocating a specific memory resource. A successful exploit of this vulnerability might lead to denial of service.
References (3)
Core 3
Core References
Vendor Advisory
https://nvidia.custhelp.com/app/answers/detail/a_id/5703
Various Sources
https://nvd.nist.gov/vuln/detail/CVE-2025-23300
Various Sources
https://www.cve.org/CVERecord?id=CVE-2025-23300
Scores
CVSS v3
5.5
EPSS
0.0005
EPSS Percentile
14.4%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-476
Status
published
Products (17)
NVIDIA/GeForce
All driver versions prior to 535.274.02
NVIDIA/GeForce
All driver versions prior to 570.195.03
NVIDIA/GeForce
All driver versions prior to 580.95.05
NVIDIA/Guest driver
535.261.03(All versions prior to and including vGPU 16.11)
NVIDIA/Guest driver
570.172.08(All versions prior to and including vGPU 18.4)
NVIDIA/Guest driver
580.82.07(All versions prior to and including vGPU 19.1)
NVIDIA/Guest driver
580.82.07(All versions up to and including the August 2025 release)
NVIDIA/NVIDIA RTX, Quadro, NVS
All driver versions prior to 535.274.02
NVIDIA/NVIDIA RTX, Quadro, NVS
All driver versions prior to 570.195.03
NVIDIA/NVIDIA RTX, Quadro, NVS
All driver versions prior to 580.95.05
... and 7 more
Published
Oct 23, 2025
Tracked Since
Feb 18, 2026