Skip to content
OpenAdvisories
High · 7.6 CVE-2025-23263 EUVD-2025-21786GHSA-f2hw-22w7-pg9w

NVIDIA DOCA-Host and Mellanox OFED contain a vulnerability in the VGT+ feature, where an attacker on a VM might cause escalation of privile…

Published Jul 17, 2025 · Updated Jul 24, 2025 · Assigned by nvidia

Description

NVIDIA DOCA-Host and Mellanox OFED contain a vulnerability in the VGT+ feature, where an attacker on a VM might cause escalation of privileges and denial of service on the VLAN.

Affected products

VendorProductAffectedFixed
NVIDIA DOCA-Host and Mellanox OFED DOCA-Host All versions prior to 2.5.4-0.0.9, DOCA-Host All versions prior to 2.9.3-0.2.2, DOCA-Host All versions prior to 3.0.0-058001, Mellanox OFED All versions prior to 5.8-7.0.6.1, Mellanox OFED All versions prior to 23.10-5.1.4.0, Mellanox OFED All versions prior to 24.10-3.2.5.0 —

References