CVE-2025-23280
Full vulnerability record from the local CVENow database.
Description
NVIDIA Display Driver for Linux contains a vulnerability where an attacker could cause a use-after-free. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure.
Severity
HIGH
CVSS score
7.0
(v3.1)
Vulnerability status
Deferred
Source identifier
Published
2025-10-10 18:15:39.013000
Last modified
2026-10-18 21:10:00.120000
View original CVE JSON
{
"id": "CVE-2025-23280",
"sourceIdentifier": "[email protected]",
"published": "2025-10-10T18:15:39.013",
"lastModified": "2026-10-18T21:10:00.120",
"vulnStatus": "Deferred",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "NVIDIA Display Driver for Linux contains a vulnerability where an attacker could cause a use-after-free. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure."
},
{
"lang": "es",
"value": "Controlador de pantalla NVIDIA para Linux contiene una vulnerabilidad donde un atacante podría causar un uso después de liberación. Un exploit exitoso de esta vulnerabilidad podría llevar a ejecución de código, escalada de privilegios, manipulación de datos, denegación de servicio y revelación de información."
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "NVIDIA",
"product": "GeForce",
"defaultStatus": "unaffected",
"platforms": [
"Linux(R580)"
],
"versions": [
{
"version": "All driver versions prior to 580.95.05",
"status": "affected"
}
]
},
{
"vendor": "NVIDIA",
"product": "GeForce",
"defaultStatus": "unaffected",
"platforms": [
"Linux(R570)"
],
"versions": [
{
"version": "All driver versions prior to 570.195.03",
"status": "affected"
}
]
},
{
"vendor": "NVIDIA",
"product": "GeForce",
"defaultStatus": "unaffected",
"platforms": [
"Linux(R535)"
],
"versions": [
{
"version": "All driver versions prior to 535.274.02",
"status": "affected"
}
]
},
{
"vendor": "NVIDIA",
"product": "NVIDIA RTX, Quadro, NVS",
"defaultStatus": "unaffected",
"platforms": [
"Linux(R580)"
],
"versions": [
{
"version": "All driver versions prior to 580.95.05",
"status": "affected"
}
]
},
{
"vendor": "NVIDIA",
"product": "NVIDIA RTX, Quadro, NVS",
"defaultStatus": "unaffected",
"platforms": [
"Linux(R570)"
],
"versions": [
{
"version": "All driver versions prior to 570.195.03",
"status": "affected"
}
]
},
{
"vendor": "NVIDIA",
"product": "NVIDIA RTX, Quadro, NVS",
"defaultStatus": "unaffected",
"platforms": [
"Linux(R535)"
],
"versions": [
{
"version": "All driver versions prior to 535.274.02",
"status": "affected"
}
]
},
{
"vendor": "NVIDIA",
"product": "Tesla",
"defaultStatus": "unaffected",
"platforms": [
"Linux(R580)"
],
"versions": [
{
"version": "All driver versions prior to 580.95.05",
"status": "affected"
}
]
},
{
"vendor": "NVIDIA",
"product": "Tesla",
"defaultStatus": "unaffected",
"platforms": [
"Linux(R570)"
],
"versions": [
{
"version": "All driver versions prior to 570.195.03",
"status": "affected"
}
]
},
{
"vendor": "NVIDIA",
"product": "Tesla",
"defaultStatus": "unaffected",
"platforms": [
"Linux(R535)"
],
"versions": [
{
"version": "All driver versions prior to 535.274.02",
"status": "affected"
}
]
},
{
"vendor": "NVIDIA",
"product": "Guest driver",
"defaultStatus": "unaffected",
"platforms": [
"Linux(R580 vGPU 19)"
],
"versions": [
{
"version": "580.82.07(All versions prior to and including vGPU 19.1)",
"status": "affected"
}
]
},
{
"vendor": "NVIDIA",
"product": "Guest driver",
"defaultStatus": "unaffected",
"platforms": [
"Linux(R580 Gaming)"
],
"versions": [
{
"version": "580.82.07(All versions up to and including the August 2025 release)",
"status": "affected"
}
]
},
{
"vendor": "NVIDIA",
"product": "Guest driver",
"defaultStatus": "unaffected",
"platforms": [
"Linux(R570 vGPU 18)"
],
"versions": [
{
"version": "570.172.08(All versions prior to and including vGPU 18.4)",
"status": "affected"
}
]
},
{
"vendor": "NVIDIA",
"product": "Guest driver",
"defaultStatus": "unaffected",
"platforms": [
"Linux(R535 vGPU 16)"
],
"versions": [
{
"version": "535.261.03(All versions prior to and including vGPU 16.11)",
"status": "affected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "HIGH",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.0,
"impactScore": 5.9
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2025-10-22T03:55:21.044832Z",
"id": "CVE-2025-23280",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-416"
}
]
}
],
"references": [
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-23280",
"source": "[email protected]"
},
{
"url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5703",
"source": "[email protected]"
},
{
"url": "https://www.cve.org/CVERecord?id=CVE-2025-23280",
"source": "[email protected]"
}
]
}