CVE-2025-23282: Virtual GPU Manager 580.82.02(All versions up to and including the August 2025 release), 580.82.02(All versions prior…

Affected technology

Virtual GPU Manager · 580.82.02(All versions up to and including the August 2025 release)
NVIDIA

Virtual GPU Manager · 580.82.02(All versions prior to and including vGPU 19.1)
NVIDIA

Virtual GPU Manager · 570.172.07(All versions prior to and including vGPU 18.4)
NVIDIA

Virtual GPU Manager · 535.261.04(All versions prior to and including vGPU 16.11)
NVIDIA

GeForce · All driver versions prior to 580.95.05
NVIDIA

GeForce · All driver versions prior to 570.195.03
NVIDIA

GeForce · All driver versions prior to 535.274.02
NVIDIA

NVIDIA RTX, Quadro, NVS · All driver versions prior to 580.95.05
NVIDIA

NVIDIA RTX, Quadro, NVS · All driver versions prior to 570.195.03
NVIDIA

NVIDIA RTX, Quadro, NVS · All driver versions prior to 535.274.02
NVIDIA

Tesla · All driver versions prior to 580.95.05
NVIDIA

Tesla · All driver versions prior to 570.195.03
NVIDIA

Tesla · All driver versions prior to 535.274.02
NVIDIA

Guest driver · 580.82.07(All versions prior to and including vGPU 19.1)
NVIDIA

Guest driver · 580.82.07(All versions up to and including the August 2025 release)
NVIDIA

Guest driver · 570.172.08(All versions prior to and including vGPU 18.4)
NVIDIA

Guest driver · 535.261.03(All versions prior to and including vGPU 16.11)
NVIDIA

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Linux contains a vulnerability where an attacker might be able to use a race condition to escalate privileges. Vendor/CNA’s CVSS 3.1 assessment (base score 7.0/10) rates confidentiality, integrity and availability impact as high.