Skip to content
OpenAdvisories
Critical · 9.0 CVE-2023-31024 EUVD-2023-35361GHSA-xj8c-vcc9-5mfq

CVE

Published Jan 12, 2024 · Updated Jun 3, 2025 · Assigned by nvidia

Description

NVIDIA DGX A100 BMC contains a vulnerability in the host KVM daemon, where an unauthenticated attacker may cause stack memory corruption by sending a specially crafted network packet. A successful exploit of this vulnerability may lead to arbitrary code execution, denial of service, information disclosure, and data tampering.

Affected products

VendorProductAffectedFixed
nvidia DGX A100 All BMC versions prior to 00.22.05 —

References