GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

SUSE-SU-2025:20757-1

Vulnerability from csaf_suse - Published: 2025-09-23 15:49 - Updated: 2025-09-23 15:49
Summary
Security update for nvidia-open-driver-G06-signed
Severity
Important
Notes
Title of the patch: Security update for nvidia-open-driver-G06-signed
Description of the patch: This update for nvidia-open-driver-G06-signed fixes the following issues: Update non-CUDA variant to 580.82.07 (bsc#1249235) Update non-CUDA variant to 580.76.05 (bsc#1247907) - get rid of rule of older KMPs not to load nvidia_drm module, which are still installed in parallel and therefore still active (bsc#1247923) Update CUDA variant to 580.65.06, which addresses various security issues: * CVE-2025-23277 (bsc#1247528) * CVE-2025-23278 (bsc#1247529) * CVE-2025-23286 (bsc#1247530) * CVE-2025-23283 (bsc#1247531) * CVE-2025-23279 (bsc#1247532) Update non-CUDA variant to 570.172.08 (bsc#1246327) - empty pci_ids-570.169; PCI ID hardware Supplements get moved to gfx repository to package nvidia-open-driver-G06-signed-kmp-meta (bsc#1246010) - remove 60-nvidia-$flavor.conf, since driver no longer gets autoselected without gfx/cuda repositories present and so we no longer need to disable it by default (bsc#1246010)
Patchnames: SUSE-SLE-Micro-6.1-kernel-140
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
CVE-2025-23277
7.3 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Affected products
Product Identifier Version Remediation
Unresolved product id: SUSE Linux Micro 6.1:nvidia-open-driver-G06-signed-cuda-kmp-default-580.82.07_k6.4.0_34-1.1.aarch64 —
Vendor Fix
Unresolved product id: SUSE Linux Micro 6.1:nvidia-open-driver-G06-signed-cuda-kmp-default-580.82.07_k6.4.0_34-1.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Linux Micro 6.1:nvidia-open-driver-G06-signed-kmp-default-580.82.07_k6.4.0_34-1.1.aarch64 —
Vendor Fix
Unresolved product id: SUSE Linux Micro 6.1:nvidia-open-driver-G06-signed-kmp-default-580.82.07_k6.4.0_34-1.1.x86_64 —
Vendor Fix
Threats
Impact important
CVE-2025-23278
7.1 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Affected products
Recommended 4 products, the same list as for CVE-2025-23277
Threats
Impact important
CVE-2025-23279
7 (High)
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
Recommended 4 products, the same list as for CVE-2025-23277
Threats
Impact important
CVE-2025-23283
7.8 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
Recommended 4 products, the same list as for CVE-2025-23277
Threats
Impact important
CVE-2025-23286
4.4 (Medium)
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Affected products
Recommended 4 products, the same list as for CVE-2025-23277
Threats
Impact moderate
References
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for nvidia-open-driver-G06-signed",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for nvidia-open-driver-G06-signed fixes the following issues:\n\nUpdate non-CUDA variant to 580.82.07 (bsc#1249235)\n\nUpdate non-CUDA variant to 580.76.05 (bsc#1247907)\n\n- get rid of rule of older KMPs not to load nvidia_drm module,\n  which are still installed in parallel and therefore still\n  active (bsc#1247923)\n\nUpdate CUDA variant to 580.65.06, which addresses various security issues:\n\n  * CVE-2025-23277 (bsc#1247528)\n  * CVE-2025-23278 (bsc#1247529)\n  * CVE-2025-23286 (bsc#1247530)\n  * CVE-2025-23283 (bsc#1247531)\n  * CVE-2025-23279 (bsc#1247532)\n\nUpdate non-CUDA variant to 570.172.08 (bsc#1246327)\n\n- empty pci_ids-570.169; PCI ID hardware Supplements get moved to\n  gfx repository to package nvidia-open-driver-G06-signed-kmp-meta\n  (bsc#1246010)\n\n- remove 60-nvidia-$flavor.conf, since driver no longer gets\n  autoselected without gfx/cuda repositories present and so we no\n  longer need to disable it by default (bsc#1246010)\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-SLE-Micro-6.1-kernel-140",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2025_20757-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2025:20757-1",
        "url": "https://www.suse.com/support/update/announcement/2025/suse-su-202520757-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2025:20757-1",
        "url": "https://lists.suse.com/pipermail/sle-updates/2025-September/041886.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1237208",
        "url": "https://bugzilla.suse.com/1237208"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1246010",
        "url": "https://bugzilla.suse.com/1246010"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1246327",
        "url": "https://bugzilla.suse.com/1246327"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1247528",
        "url": "https://bugzilla.suse.com/1247528"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1247529",
        "url": "https://bugzilla.suse.com/1247529"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1247530",
        "url": "https://bugzilla.suse.com/1247530"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1247531",
        "url": "https://bugzilla.suse.com/1247531"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1247532",
        "url": "https://bugzilla.suse.com/1247532"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1247907",
        "url": "https://bugzilla.suse.com/1247907"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1247923",
        "url": "https://bugzilla.suse.com/1247923"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1249235",
        "url": "https://bugzilla.suse.com/1249235"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-23277 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-23277/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-23278 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-23278/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-23279 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-23279/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-23283 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-23283/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-23286 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-23286/"
      }
    ],
    "title": "Security update for nvidia-open-driver-G06-signed",
    "tracking": {
      "current_release_date": "2025-09-23T15:49:58Z",
      "generator": {
        "date": "2025-09-23T15:49:58Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2025:20757-1",
      "initial_release_date": "2025-09-23T15:49:58Z",
      "revision_history": [
        {
          "date": "2025-09-23T15:49:58Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "nvidia-open-driver-G06-signed-cuda-kmp-default-580.82.07_k6.4.0_34-1.1.aarch64",
                "product": {
                  "name": "nvidia-open-driver-G06-signed-cuda-kmp-default-580.82.07_k6.4.0_34-1.1.aarch64",
                  "product_id": "nvidia-open-driver-G06-signed-cuda-kmp-default-580.82.07_k6.4.0_34-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "nvidia-open-driver-G06-signed-kmp-default-580.82.07_k6.4.0_34-1.1.aarch64",
                "product": {
                  "name": "nvidia-open-driver-G06-signed-kmp-default-580.82.07_k6.4.0_34-1.1.aarch64",
                  "product_id": "nvidia-open-driver-G06-signed-kmp-default-580.82.07_k6.4.0_34-1.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "nvidia-open-driver-G06-signed-cuda-kmp-default-580.82.07_k6.4.0_34-1.1.x86_64",
                "product": {
                  "name": "nvidia-open-driver-G06-signed-cuda-kmp-default-580.82.07_k6.4.0_34-1.1.x86_64",
                  "product_id": "nvidia-open-driver-G06-signed-cuda-kmp-default-580.82.07_k6.4.0_34-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "nvidia-open-driver-G06-signed-kmp-default-580.82.07_k6.4.0_34-1.1.x86_64",
                "product": {
                  "name": "nvidia-open-driver-G06-signed-kmp-default-580.82.07_k6.4.0_34-1.1.x86_64",
                  "product_id": "nvidia-open-driver-G06-signed-kmp-default-580.82.07_k6.4.0_34-1.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Micro 6.1",
                "product": {
                  "name": "SUSE Linux Micro 6.1",
                  "product_id": "SUSE Linux Micro 6.1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sl-micro:6.1"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nvidia-open-driver-G06-signed-cuda-kmp-default-580.82.07_k6.4.0_34-1.1.aarch64 as component of SUSE Linux Micro 6.1",
          "product_id": "SUSE Linux Micro 6.1:nvidia-open-driver-G06-signed-cuda-kmp-default-580.82.07_k6.4.0_34-1.1.aarch64"
        },
        "product_reference": "nvidia-open-driver-G06-signed-cuda-kmp-default-580.82.07_k6.4.0_34-1.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Micro 6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nvidia-open-driver-G06-signed-cuda-kmp-default-580.82.07_k6.4.0_34-1.1.x86_64 as component of SUSE Linux Micro 6.1",
          "product_id": "SUSE Linux Micro 6.1:nvidia-open-driver-G06-signed-cuda-kmp-default-580.82.07_k6.4.0_34-1.1.x86_64"
        },
        "product_reference": "nvidia-open-driver-G06-signed-cuda-kmp-default-580.82.07_k6.4.0_34-1.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Micro 6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nvidia-open-driver-G06-signed-kmp-default-580.82.07_k6.4.0_34-1.1.aarch64 as component of SUSE Linux Micro 6.1",
          "product_id": "SUSE Linux Micro 6.1:nvidia-open-driver-G06-signed-kmp-default-580.82.07_k6.4.0_34-1.1.aarch64"
        },
        "product_reference": "nvidia-open-driver-G06-signed-kmp-default-580.82.07_k6.4.0_34-1.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Micro 6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nvidia-open-driver-G06-signed-kmp-default-580.82.07_k6.4.0_34-1.1.x86_64 as component of SUSE Linux Micro 6.1",
          "product_id": "SUSE Linux Micro 6.1:nvidia-open-driver-G06-signed-kmp-default-580.82.07_k6.4.0_34-1.1.x86_64"
        },
        "product_reference": "nvidia-open-driver-G06-signed-kmp-default-580.82.07_k6.4.0_34-1.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Micro 6.1"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-23277",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-23277"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "NVIDIA Display Driver for Linux and Windows contains a vulnerability in the kernel mode driver, where an attacker could access memory outside bounds permitted under normal use cases. A successful exploit of this vulnerability might lead to denial of service, data tampering, or information disclosure.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:nvidia-open-driver-G06-signed-cuda-kmp-default-580.82.07_k6.4.0_34-1.1.aarch64",
          "SUSE Linux Micro 6.1:nvidia-open-driver-G06-signed-cuda-kmp-default-580.82.07_k6.4.0_34-1.1.x86_64",
          "SUSE Linux Micro 6.1:nvidia-open-driver-G06-signed-kmp-default-580.82.07_k6.4.0_34-1.1.aarch64",
          "SUSE Linux Micro 6.1:nvidia-open-driver-G06-signed-kmp-default-580.82.07_k6.4.0_34-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-23277",
          "url": "https://www.suse.com/security/cve/CVE-2025-23277"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1247528 for CVE-2025-23277",
          "url": "https://bugzilla.suse.com/1247528"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:nvidia-open-driver-G06-signed-cuda-kmp-default-580.82.07_k6.4.0_34-1.1.aarch64",
            "SUSE Linux Micro 6.1:nvidia-open-driver-G06-signed-cuda-kmp-default-580.82.07_k6.4.0_34-1.1.x86_64",
            "SUSE Linux Micro 6.1:nvidia-open-driver-G06-signed-kmp-default-580.82.07_k6.4.0_34-1.1.aarch64",
            "SUSE Linux Micro 6.1:nvidia-open-driver-G06-signed-kmp-default-580.82.07_k6.4.0_34-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:nvidia-open-driver-G06-signed-cuda-kmp-default-580.82.07_k6.4.0_34-1.1.aarch64",
            "SUSE Linux Micro 6.1:nvidia-open-driver-G06-signed-cuda-kmp-default-580.82.07_k6.4.0_34-1.1.x86_64",
            "SUSE Linux Micro 6.1:nvidia-open-driver-G06-signed-kmp-default-580.82.07_k6.4.0_34-1.1.aarch64",
            "SUSE Linux Micro 6.1:nvidia-open-driver-G06-signed-kmp-default-580.82.07_k6.4.0_34-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-09-23T15:49:58Z",
          "details": "important"
        }
      ],
      "title": "CVE-2025-23277"
    },
    {
      "cve": "CVE-2025-23278",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-23278"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker might cause an improper index validation by issuing a call with crafted parameters. A successful exploit of this vulnerability might lead to data tampering   or denial of service.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:nvidia-open-driver-G06-signed-cuda-kmp-default-580.82.07_k6.4.0_34-1.1.aarch64",
          "SUSE Linux Micro 6.1:nvidia-open-driver-G06-signed-cuda-kmp-default-580.82.07_k6.4.0_34-1.1.x86_64",
          "SUSE Linux Micro 6.1:nvidia-open-driver-G06-signed-kmp-default-580.82.07_k6.4.0_34-1.1.aarch64",
          "SUSE Linux Micro 6.1:nvidia-open-driver-G06-signed-kmp-default-580.82.07_k6.4.0_34-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-23278",
          "url": "https://www.suse.com/security/cve/CVE-2025-23278"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1247529 for CVE-2025-23278",
          "url": "https://bugzilla.suse.com/1247529"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:nvidia-open-driver-G06-signed-cuda-kmp-default-580.82.07_k6.4.0_34-1.1.aarch64",
            "SUSE Linux Micro 6.1:nvidia-open-driver-G06-signed-cuda-kmp-default-580.82.07_k6.4.0_34-1.1.x86_64",
            "SUSE Linux Micro 6.1:nvidia-open-driver-G06-signed-kmp-default-580.82.07_k6.4.0_34-1.1.aarch64",
            "SUSE Linux Micro 6.1:nvidia-open-driver-G06-signed-kmp-default-580.82.07_k6.4.0_34-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:nvidia-open-driver-G06-signed-cuda-kmp-default-580.82.07_k6.4.0_34-1.1.aarch64",
            "SUSE Linux Micro 6.1:nvidia-open-driver-G06-signed-cuda-kmp-default-580.82.07_k6.4.0_34-1.1.x86_64",
            "SUSE Linux Micro 6.1:nvidia-open-driver-G06-signed-kmp-default-580.82.07_k6.4.0_34-1.1.aarch64",
            "SUSE Linux Micro 6.1:nvidia-open-driver-G06-signed-kmp-default-580.82.07_k6.4.0_34-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-09-23T15:49:58Z",
          "details": "important"
        }
      ],
      "title": "CVE-2025-23278"
    },
    {
      "cve": "CVE-2025-23279",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-23279"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "NVIDIA .run Installer for Linux and Solaris contains a vulnerability where an attacker could use a race condition to escalate privileges. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, denial of service, or data tampering.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:nvidia-open-driver-G06-signed-cuda-kmp-default-580.82.07_k6.4.0_34-1.1.aarch64",
          "SUSE Linux Micro 6.1:nvidia-open-driver-G06-signed-cuda-kmp-default-580.82.07_k6.4.0_34-1.1.x86_64",
          "SUSE Linux Micro 6.1:nvidia-open-driver-G06-signed-kmp-default-580.82.07_k6.4.0_34-1.1.aarch64",
          "SUSE Linux Micro 6.1:nvidia-open-driver-G06-signed-kmp-default-580.82.07_k6.4.0_34-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-23279",
          "url": "https://www.suse.com/security/cve/CVE-2025-23279"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1247532 for CVE-2025-23279",
          "url": "https://bugzilla.suse.com/1247532"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:nvidia-open-driver-G06-signed-cuda-kmp-default-580.82.07_k6.4.0_34-1.1.aarch64",
            "SUSE Linux Micro 6.1:nvidia-open-driver-G06-signed-cuda-kmp-default-580.82.07_k6.4.0_34-1.1.x86_64",
            "SUSE Linux Micro 6.1:nvidia-open-driver-G06-signed-kmp-default-580.82.07_k6.4.0_34-1.1.aarch64",
            "SUSE Linux Micro 6.1:nvidia-open-driver-G06-signed-kmp-default-580.82.07_k6.4.0_34-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:nvidia-open-driver-G06-signed-cuda-kmp-default-580.82.07_k6.4.0_34-1.1.aarch64",
            "SUSE Linux Micro 6.1:nvidia-open-driver-G06-signed-cuda-kmp-default-580.82.07_k6.4.0_34-1.1.x86_64",
            "SUSE Linux Micro 6.1:nvidia-open-driver-G06-signed-kmp-default-580.82.07_k6.4.0_34-1.1.aarch64",
            "SUSE Linux Micro 6.1:nvidia-open-driver-G06-signed-kmp-default-580.82.07_k6.4.0_34-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-09-23T15:49:58Z",
          "details": "important"
        }
      ],
      "title": "CVE-2025-23279"
    },
    {
      "cve": "CVE-2025-23283",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-23283"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "NVIDIA vGPU software for Linux-style hypervisors contains a vulnerability in the Virtual GPU Manager, where a malicious guest could cause stack buffer overflow. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, or data tampering.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:nvidia-open-driver-G06-signed-cuda-kmp-default-580.82.07_k6.4.0_34-1.1.aarch64",
          "SUSE Linux Micro 6.1:nvidia-open-driver-G06-signed-cuda-kmp-default-580.82.07_k6.4.0_34-1.1.x86_64",
          "SUSE Linux Micro 6.1:nvidia-open-driver-G06-signed-kmp-default-580.82.07_k6.4.0_34-1.1.aarch64",
          "SUSE Linux Micro 6.1:nvidia-open-driver-G06-signed-kmp-default-580.82.07_k6.4.0_34-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-23283",
          "url": "https://www.suse.com/security/cve/CVE-2025-23283"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1247531 for CVE-2025-23283",
          "url": "https://bugzilla.suse.com/1247531"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:nvidia-open-driver-G06-signed-cuda-kmp-default-580.82.07_k6.4.0_34-1.1.aarch64",
            "SUSE Linux Micro 6.1:nvidia-open-driver-G06-signed-cuda-kmp-default-580.82.07_k6.4.0_34-1.1.x86_64",
            "SUSE Linux Micro 6.1:nvidia-open-driver-G06-signed-kmp-default-580.82.07_k6.4.0_34-1.1.aarch64",
            "SUSE Linux Micro 6.1:nvidia-open-driver-G06-signed-kmp-default-580.82.07_k6.4.0_34-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:nvidia-open-driver-G06-signed-cuda-kmp-default-580.82.07_k6.4.0_34-1.1.aarch64",
            "SUSE Linux Micro 6.1:nvidia-open-driver-G06-signed-cuda-kmp-default-580.82.07_k6.4.0_34-1.1.x86_64",
            "SUSE Linux Micro 6.1:nvidia-open-driver-G06-signed-kmp-default-580.82.07_k6.4.0_34-1.1.aarch64",
            "SUSE Linux Micro 6.1:nvidia-open-driver-G06-signed-kmp-default-580.82.07_k6.4.0_34-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-09-23T15:49:58Z",
          "details": "important"
        }
      ],
      "title": "CVE-2025-23283"
    },
    {
      "cve": "CVE-2025-23286",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-23286"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where an attacker could read invalid memory. A successful exploit of this vulnerability might lead to information disclosure.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:nvidia-open-driver-G06-signed-cuda-kmp-default-580.82.07_k6.4.0_34-1.1.aarch64",
          "SUSE Linux Micro 6.1:nvidia-open-driver-G06-signed-cuda-kmp-default-580.82.07_k6.4.0_34-1.1.x86_64",
          "SUSE Linux Micro 6.1:nvidia-open-driver-G06-signed-kmp-default-580.82.07_k6.4.0_34-1.1.aarch64",
          "SUSE Linux Micro 6.1:nvidia-open-driver-G06-signed-kmp-default-580.82.07_k6.4.0_34-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-23286",
          "url": "https://www.suse.com/security/cve/CVE-2025-23286"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1247530 for CVE-2025-23286",
          "url": "https://bugzilla.suse.com/1247530"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:nvidia-open-driver-G06-signed-cuda-kmp-default-580.82.07_k6.4.0_34-1.1.aarch64",
            "SUSE Linux Micro 6.1:nvidia-open-driver-G06-signed-cuda-kmp-default-580.82.07_k6.4.0_34-1.1.x86_64",
            "SUSE Linux Micro 6.1:nvidia-open-driver-G06-signed-kmp-default-580.82.07_k6.4.0_34-1.1.aarch64",
            "SUSE Linux Micro 6.1:nvidia-open-driver-G06-signed-kmp-default-580.82.07_k6.4.0_34-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:nvidia-open-driver-G06-signed-cuda-kmp-default-580.82.07_k6.4.0_34-1.1.aarch64",
            "SUSE Linux Micro 6.1:nvidia-open-driver-G06-signed-cuda-kmp-default-580.82.07_k6.4.0_34-1.1.x86_64",
            "SUSE Linux Micro 6.1:nvidia-open-driver-G06-signed-kmp-default-580.82.07_k6.4.0_34-1.1.aarch64",
            "SUSE Linux Micro 6.1:nvidia-open-driver-G06-signed-kmp-default-580.82.07_k6.4.0_34-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-09-23T15:49:58Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2025-23286"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.