Skip to content
OpenAdvisories
High · 8.7 CVE-2024-0106 EUVD-2024-15907GHSA-83qc-96jm-c5q7

NVIDIA ConnectX Host Firmware for the BlueField Data Processing Unit (DPU) contains a vulnerability where an attacker may cause an improper…

Published Nov 1, 2024 · Updated Nov 1, 2024 · Assigned by nvidia

Description

NVIDIA ConnectX Host Firmware for the BlueField Data Processing Unit (DPU) contains a vulnerability where an attacker may cause an improper handling of insufficient privileges issue. A successful exploit of this vulnerability may lead to denial of service, data tampering, and limited information disclosure.

Affected products

VendorProductAffectedFixed
NVIDIA BlueField 1 All versions prior to 18.31.1014 —
NVIDIA BlueField GA All versions prior to xx.41.1000 —
NVIDIA BlueField LTS22 All versions prior to xx.35.4030 —
NVIDIA BlueField LTS23 All versions prior to xx.39.3560 —

References