Description
NVIDIA ConnectX and BlueField contain a vulnerability in the command interface where a local user with virtual function (VF) access may cause a write out of bounds by crafted input. A successful exploit of this vulnerability may lead to arbitrary code execution on the device.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| NVIDIA | BlueField GA | All versions prior to 46.3008 | — |
| NVIDIA | BlueField LTS22 | All versions prior to 35.8002 | — |
| NVIDIA | BlueField LTS23 | All versions prior to 39.8002 | — |
| NVIDIA | BlueField LTS24 | All versions prior to 43.8002 | — |
| NVIDIA | ConnectX GA | All versions prior to 46.3008 | — |
| NVIDIA | ConnectX LTS22 | All versions prior to 35.8002 | — |
| NVIDIA | ConnectX LTS23 | All versions prior to 39.8002 | — |
| NVIDIA | ConnectX LTS24 | All versions prior to 43.8002 | — |
| NVIDIA | ConnectX-4 | All versions prior to 28.4702 | — |
| NVIDIA | ConnectX-4 LX | All versions prior to 32.1908 | — |
Advisories 1
- WID-SEC-2026-2912 Dell PowerScale OneFS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Sep 30, 2026