Alerts This Week
Warning Icon 1 525
Alerts This Week
Warning Icon 1 525

SUSE Reports Major Memory Access Vulnerabilities in nvidia-open-driver-G06

suse
Calendar Grey September 3, 2025
Dist Suse Esm H88
The latest essential update from SUSE for the nvidia-open-driver-G06-signed addresses a range of critical vulnerabilities that pose risks to system integrity.
* bsc#1236191 * bsc#1236658 * bsc#1236746 * bsc#1237308 * bsc#1237585

Summary

## This update for nvidia-open-driver-G06-signed fixes the following issues: Updated CUDA variant to 580.65.06: * CVE-2025-23277: Fixed access memory outside bounds permitted under normal use cases in NVIDIA Display Driver (bsc#1247528) * CVE-2025-23278: Fixed improper index validation by issuing a call with crafted parameters in NVIDIA Display Driver (bsc#1247529) * CVE-2025-23286: Fixed invalid memory read in NVIDIA GPU Display Driver (bsc#1247530) * CVE-2025-23283: Fixed stack buffer overflow triggerable by a malicious guest in Virtual GPU Manager in NVIDIA vGPU software (bsc#1247531) * CVE-2025-23279: Fixed race condition that lead to privileges escalations in NVIDIA .run Installer (bsc#1247532) Updated non-CUDA variant to 570.172.08 (bsc#1246327) ## Patch Instructions:

References

* bsc#1236191

* bsc#1236658

* bsc#1236746

* bsc#1237308

* bsc#1237585

* bsc#1239139

* bsc#1239653

* bsc#1241231

* bsc#1242054

* bsc#1243192

* bsc#1244614

* bsc#1246010

* bsc#1246327

* bsc#1247528

* bsc#1247529

* bsc#1247530

* bsc#1247531

* bsc#1247532

Cross-

* CVE-2025-23277

* CVE-2025-23278

* CVE-2025-23279

* CVE-2025-23283

* CVE-2025-23286

CVSS scores:

* CVE-2025-23277 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

* CVE-2025-23277 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

* CVE-2025-23278 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

* CVE-2025-23278 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

* CVE-2025-23279 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2025:03062-1
Release Date: 2025-09-03T16:06:55Z
Rating: important

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here