{
  "cveId": "CVE-2025-23286",
  "url": "https://patchblox.com/security/cve/CVE-2025-23286",
  "summary": "CVE-2025-23286 is fixed in 5 products on 1 platform, first by DEBIAN-CVE-2025-23286, released August 2, 2025. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "nvidia-open-driver-G06-signed: This update for nvidia-open-driver-G06-signed fixes the following issues:\n\nUpdated CUDA variant to 580.82.07:\n    \n-...",
  "description": "This update for nvidia-open-driver-G06-signed fixes the following issues:\n\nUpdated CUDA variant to 580.82.07:\n    \n- CVE-2025-23277: Fixed access to memory outside bounds permitted under normal \n  use cases in NVIDIA Display Driver (bsc#1247528).\n- CVE-2025-23278: Fixed improper index validation by issuing a call with \n  crafted parameters in NVIDIA Display Driver (bsc#1247529).\n- CVE-2025-23286: Fixed invalid memory read in NVIDIA GPU Display Driver (bsc#1247530).\n- CVE-2025-23283: Fixed stack buffer overflow triggerable by a malicious guest \n  in Virtual GPU Manager in NVIDIA vGPU software (bsc#1247531).\n- CVE-2025-23279: Fixed race condition that leads to privileges escalations \n  in NVIDIA .run Installer (bsc#1247532).\n    \nUpdate non-CUDA variant to 580.82.07 (bsc#1249235).                                                                                                                                                                                                                      \n\nOther fixes:\n\n- Added Requires to be provided by special versions of nvidia-modprobe and\n  nvidia-persitenced built against SP4 (bsc#1237208, jsc#PED-13295).\n- Get rid of rule of older KMPs not to load nvidia_drm module,                                                                                                                                                                                                                \n  which are still installed in parallel and therefore still                                                                                                                                                                                                                   \n  active (bsc#1247923).",
  "published": "2025-08-02T22:15:45Z",
  "severity": "medium",
  "cvss": 4.4,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
  "epss": 0.00157,
  "epssPercentile": 0.04873,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "nvidia-graphics-drivers",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "535.261.03-1",
      "fix": "DEBIAN-CVE-2025-23286",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2025-23286",
      "released": "2025-08-02T22:15:45Z"
    },
    {
      "platform": "linux",
      "product": "nvidia-graphics-drivers-tesla",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "525.147.05-6",
      "fix": "DEBIAN-CVE-2025-23286",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2025-23286",
      "released": "2025-08-02T22:15:45Z"
    },
    {
      "platform": "linux",
      "product": "nvidia-open-driver-G06-signed",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "580.82.07-150600.3.63.1",
      "fix": "SUSE-SU-2025:03247-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-03247-1",
      "released": "2025-09-17T11:11:37Z"
    },
    {
      "platform": "linux",
      "product": "nvidia-open-driver-G06-signed",
      "release": "sles 15.6",
      "fixedVersion": "580.82.07-150600.3.63.1",
      "fix": "SUSE-SU-2025:03247-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-03247-1",
      "released": "2025-09-17T11:11:37Z"
    },
    {
      "platform": "linux",
      "product": "nvidia-open-driver-G06-signed",
      "release": "sles 15.7",
      "fixedVersion": "580.82.07-150700.3.21.1",
      "fix": "SUSE-SU-2025:03246-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-03246-1",
      "released": "2025-09-17T11:11:22Z"
    },
    {
      "platform": "linux",
      "product": "nvidia-open-driver-G06-signed-cuda",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "580.82.07-150600.3.63.1",
      "fix": "SUSE-SU-2025:03247-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-03247-1",
      "released": "2025-09-17T11:11:37Z"
    },
    {
      "platform": "linux",
      "product": "nvidia-open-driver-G06-signed-cuda",
      "release": "sles 15.6",
      "fixedVersion": "580.82.07-150600.3.63.1",
      "fix": "SUSE-SU-2025:03247-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-03247-1",
      "released": "2025-09-17T11:11:37Z"
    },
    {
      "platform": "linux",
      "product": "nvidia-open-driver-G06-signed-cuda",
      "release": "sles 15.7",
      "fixedVersion": "580.82.07-150600.3.63.1",
      "fix": "SUSE-SU-2025:03247-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-03247-1",
      "released": "2025-09-17T11:11:37Z"
    },
    {
      "platform": "linux",
      "product": "nvidia-open-gpu-kernel-modules",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "535.261.03-1",
      "fix": "DEBIAN-CVE-2025-23286",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2025-23286",
      "released": "2025-08-02T22:15:45Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T06:59:42Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}