High severity7.8NVD Advisory· Published Sep 12, 2023· Updated Jun 17, 2026

CVE-2023-25519

Description

NVIDIA ConnectX Host Firmware for the BlueField Data Processing Unit contains a vulnerability where a restricted host may cause an incorrect user management error. A successful exploit of this vulnerability may lead to escalation of privileges.

Affected products

Nvidia/Bluefield 1 Firmware
cpe:2.3:o:nvidia:bluefield_1_firmware:*:*:*:*:*:*:*:*
Range: >=18.24.1000
Nvidia/Bluefield 2 Ga Firmware
cpe:2.3:o:nvidia:bluefield_2_ga_firmware:*:*:*:*:*:*:*:*
Range: <24.38.1002
Nvidia/Bluefield 2 Lts Firmware
cpe:2.3:o:nvidia:bluefield_2_lts_firmware:*:*:*:*:*:*:*:*
Range: <24.35.3006
Nvidia/Bluefield 3 Ga Firmware
cpe:2.3:o:nvidia:bluefield_3_ga_firmware:*:*:*:*:*:*:*:*
Range: <32.38.1002
Nvidia/Connectx Firmwarellm-fuzzy
Nvidia/Bluefieldcpe-rescue4 versions
All versions after 18.24.1000+ 3 more
- (no CPE)range: All versions after 18.24.1000
- (no CPE)range: All versions prior to 24.38.1002
- (no CPE)range: All versions prior to 24.35.3006
- (no CPE)range: All versions prior to 32.38.1002

Patches

Vulnerability mechanics

References

nvidia.custhelp.com/app/answers/detail/a_id/5479nvdVendor Advisory
https//nvidia.custhelp.com/app/answers/detail/a_id/5479nvdBroken Link

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000