Description
NVIDIA Display Driver for Linux contains a vulnerability where an attacker might be able to trigger a null pointer dereference. A successful exploit of this vulnerability might lead to denial of service.
References (3)
Core 3
Core References
Vendor Advisory
https://nvidia.custhelp.com/app/answers/detail/a_id/5703
Various Sources
https://nvd.nist.gov/vuln/detail/CVE-2025-23330
Various Sources
https://www.cve.org/CVERecord?id=CVE-2025-23330
Scores
CVSS v3
5.5
EPSS
0.0001
EPSS Percentile
1.4%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-476
Status
published
Products (13)
NVIDIA/GeForce
All driver versions prior to 535.274.02
NVIDIA/GeForce
All driver versions prior to 570.195.03
NVIDIA/GeForce
All driver versions prior to 580.95.05
NVIDIA/Guest driver
535.261.03(All versions prior to and including vGPU 16.11)
NVIDIA/Guest driver
570.172.08(All versions prior to and including vGPU 18.4)
NVIDIA/Guest driver
580.82.07(All versions prior to and including vGPU 19.1)
NVIDIA/Guest driver
580.82.07(All versions up to and including the August 2025 release)
NVIDIA/NVIDIA RTX, Quadro, NVS
All driver versions prior to 535.274.02
NVIDIA/NVIDIA RTX, Quadro, NVS
All driver versions prior to 570.195.03
NVIDIA/NVIDIA RTX, Quadro, NVS
All driver versions prior to 580.95.05
... and 3 more
Published
Oct 23, 2025
Tracked Since
Feb 18, 2026