Skip to content
OpenAdvisories
High · 8.7 CVE-2025-23256 EUVD-2025-26735GHSA-cf8m-72r3-jm23

NVIDIA BlueField contains a vulnerability in the management interface, where an attacker with local access could cause incorrect authorizat…

Published Sep 4, 2025 · Updated Sep 4, 2025 · Assigned by nvidia

Description

NVIDIA BlueField contains a vulnerability in the management interface, where an attacker with local access could cause incorrect authorization to modify the configuration. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure, and data tampering.

Affected products

VendorProductAffectedFixed
NVIDIA BlueField GA All versions prior to 45.1020 —
NVIDIA BlueField LTS22 All versions prior to 35.4554 —
NVIDIA BlueField LTS23 All versions prior to 39.5050 —
NVIDIA BlueField LTS24 All versions prior to 43.3608 —

References