Incorrect permission assignment for critical resource in NVIDIA Linux GPU Display Driver - CVE-2025-23245

Vulnerability identifier: #VU107923

CSH Severity: Low

CVSS v4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2025-23245

CWE-ID: CWE-732

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to insecure permissions in Virtual GPU Manager (vGPU plugin). A local user can perform a denial of service (DoS) attack.

NVIDIA Linux GPU Display Driver
NVIDIA Graphics Processing Unit (GPU) Adapter Linux Driver for ThinkSystem NVIDIA HGX H100 80GB 700W 8-GPU Board
Nvidia Linux Driver for RHEL 9.3 - ThinkStation P8
Nvidia Linux Driver for RHEL 9.3 - ThinkStation P620
Nvidia Linux Driver for RHEL 8.8, RHEL9.3 - ThinkStation P620, P8
NVIDIA Graphic Linux Driver for Redhat 8.7, Redhat 9.2 - ThinkStation P520c, P520, P720, P920, P5, P7, PX
Nvidia Discrete VGA Driver for Linux - ThinkStation P340 Tiny
Nvidia Graphics Linux Driver for Linux, RHEL8.6, RHEL8.7, RHEL9.3 - ThinkStation
NVIDIA Graphic Linux Driver for Linux RHEL8.7, RHEL9.2, RHEL9.4 - ThinkStation
NVIDIA Video GFE (GN18-S5 Optimus) for Windows 11 (Version 21H2 or later) and 10 (Version 21H2 or later) - ThinkPad L14 Gen 4 (Type 21H1, 21H2), L15 Gen 4 (Type 21H3, 21H4)
NVIDIA Video GFE (GN18-S5 Optimus) for Windows 11 (Version 21H2 or later), 10 64-bit (Version 20H2 or later) - ThinkPad L14 Gen 3, L15 Gen 3
Nvidia Graphics Processing Unit (GPU) Adapter Linux Driver
ThinkSystem SR630
ThinkSystem SR665
ThinkSystem SR655 V3
ThinkSystem SR655
ThinkSystem SR650 V3
ThinkSystem SR650 V2
ThinkSystem SR650
ThinkSystem SR645 V3
ThinkSystem SR645
ThinkSystem SR635 V3
ThinkSystem SR635
ThinkSystem SR630 V3
ThinkSystem SR630 V2
ThinkSystem SR665 V3
ThinkSystem SR258 V3
ThinkSystem SR258 V2
ThinkSystem SR258
ThinkSystem SR250 V3
ThinkSystem SR250 V2
ThinkSystem SR250
ThinkSystem SE350
ThinkSystem SD665-N V3
ThinkSystem SD650-N V3
ThinkSystem SD650-N V2
ThinkSystem SD550 V3
ThinkSystem SD535 V3
ThinkSystem ST258
ThinkSystem ST658 V3
ThinkSystem ST658 V2
ThinkSystem ST650 V3
ThinkSystem ST650 V2
ThinkSystem ST58 V2
ThinkSystem ST58
ThinkSystem ST558
ThinkSystem ST550
ThinkSystem ST50 V2
ThinkSystem ST50
ThinkSystem ST258 V3
ThinkSystem ST258 V2
ThinkSystem SD530 V3
ThinkSystem ST250 V2
ThinkSystem ST250
ThinkSystem SR860 V3
ThinkSystem SR860 V2
ThinkSystem SR860
ThinkSystem SR850 V3
ThinkSystem SR850 V2
ThinkSystem SR685a V3
ThinkSystem SR680a V3
ThinkSystem SR675 V3
ThinkSystem SR670 V2
ThinkSystem SR670
ThinkEdge SE360 V2
ThinkStation P2 Tower Workstation
ThinkPad L15 Gen 4 21H4
ThinkPad L15 Gen 4 21H3
ThinkPad L15 Gen 3 21C4
ThinkPad L15 Gen 3 21C3
ThinkPad L14 Gen 4 21H2
ThinkPad L14 Gen 4 21H1
ThinkPad L14 Gen 3 21C2
ThinkPad L14 Gen 3 21C1
ThinkEdge SE455 V3
ThinkEdge SE450
ThinkSystem SD530
ThinkStation P3 Tower Workstation
ThinkSystem ST250 V3
ThinkStation PX Workstation
ThinkStation P920 Workstation
ThinkStation P8 Workstation
ThinkStation P720 Workstation
ThinkStation P7 Intel Workstation
ThinkStation P620 Workstation
ThinkStation P520c Workstation
ThinkStation P520 Workstation
ThinkStation P5 Workstation
ThinkStation P360 Ultra Workstation
ThinkStation P360 Workstation
ThinkStation P358 Workstation
ThinkStation P350 Workstation
ThinkStation P348 Workstation
ThinkStation P340 Workstation
ThinkStation P330 Workstation 2nd Gen
ThinkStation P330 Workstation
ThinkStation P320 Workstation
ThinkStation P3 Ultra Workstation
ThinkStation P3 Workstation
NVIDIA Windows GPU Display Driver

Install updates from vendor's website.

NVIDIA Linux GPU Display Driver - addressed in versions 535.247.01, 550.163.01, 570.133.07, 575.51.02
NVIDIA Windows GPU Display Driver - update to 572.83

• https://nvidia.custhelp.com/app/answers/detail/a_id/5630

• Multiple vulnerabilities in NVIDIA Linux GPU Display Driver
• Multiple vulnerabilities in NVIDIA Windows GPU Display Driver
• Multiple vulnerabilities in Lenovo NVIDIA GPU Display driver