CVE-2025-23280
Public on 2025-10-01
Modified on 2025-10-13
Description
NVIDIA Display Driver for Linux contains a vulnerability where an attacker could cause a use-after-free. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure.
CVSS v3 Base Score
See breakdown
Affected Packages
| Platform | Package | Release Date | Advisory | Status |
|---|---|---|---|---|
| Amazon Linux 2023 | cuda-cuobjdump-13-0 | 2025-09-29 | ALAS2023NVIDIA-2025-143 | Fixed |
| Amazon Linux 2023 | cuda-cuobjdump-13-0 | 2025-10-14 | ALAS2023NVIDIA-2025-185 | Fixed |
| Amazon Linux 2023 | nvidia-driver | Pending Fix |
CVSS Scores
| Score Type | Score | Vector | |
|---|---|---|---|
| Amazon Linux | CVSSv3 | 7.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
| NVD | CVSSv3 | 7.0 | CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H |