CVE-2025-23280: GeForce All driver versions prior to 580.95.05, All driver versions prior to 570.195.03, All driver versions prior to…

Affected technology

GeForce · All driver versions prior to 580.95.05
NVIDIA

GeForce · All driver versions prior to 570.195.03
NVIDIA

GeForce · All driver versions prior to 535.274.02
NVIDIA

NVIDIA RTX, Quadro, NVS · All driver versions prior to 580.95.05
NVIDIA

NVIDIA RTX, Quadro, NVS · All driver versions prior to 570.195.03
NVIDIA

NVIDIA RTX, Quadro, NVS · All driver versions prior to 535.274.02
NVIDIA

Tesla · All driver versions prior to 580.95.05
NVIDIA

Tesla · All driver versions prior to 570.195.03
NVIDIA

Tesla · All driver versions prior to 535.274.02
NVIDIA

Guest driver · 580.82.07(All versions prior to and including vGPU 19.1)
NVIDIA

Guest driver · 580.82.07(All versions up to and including the August 2025 release)
NVIDIA

Guest driver · 570.172.08(All versions prior to and including vGPU 18.4)
NVIDIA

Guest driver · 535.261.03(All versions prior to and including vGPU 16.11)
NVIDIA

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Linux contains a vulnerability where an attacker could cause a use-after-free. Vendor/CNA’s CVSS 3.1 assessment (base score 7.0/10) rates confidentiality, integrity and availability impact as high.