CVE-2025-23330
published 2025-10-23CVE-2025-23330: NVIDIA Display Driver for Linux contains a vulnerability where an attacker might be able to trigger a null pointer dereference. A successful exploit of this…
PriorityP420medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.21%
10.8th percentile
NVIDIA Display Driver for Linux contains a vulnerability where an attacker might be able to trigger a null pointer dereference. A successful exploit of this vulnerability might lead to denial of service.
Affected
21 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | nvidia-graphics-drivers | < nvidia-graphics-drivers-tesla 525.147.05-6 (bookworm) | nvidia-graphics-drivers-tesla 525.147.05-6 (bookworm) |
| debian | nvidia-graphics-drivers-legacy-340xx | < nvidia-graphics-drivers-tesla 525.147.05-6 (bookworm) | nvidia-graphics-drivers-tesla 525.147.05-6 (bookworm) |
| debian | nvidia-graphics-drivers-legacy-390xx | < nvidia-graphics-drivers-tesla 525.147.05-6 (bookworm) | nvidia-graphics-drivers-tesla 525.147.05-6 (bookworm) |
| debian | nvidia-graphics-drivers-tesla | < nvidia-graphics-drivers-tesla 525.147.05-6 (bookworm) | nvidia-graphics-drivers-tesla 525.147.05-6 (bookworm) |
| debian | nvidia-graphics-drivers-tesla-418 | < nvidia-graphics-drivers-tesla 525.147.05-6 (bookworm) | nvidia-graphics-drivers-tesla 525.147.05-6 (bookworm) |
| debian | nvidia-graphics-drivers-tesla-450 | < nvidia-graphics-drivers-tesla 525.147.05-6 (bookworm) | nvidia-graphics-drivers-tesla 525.147.05-6 (bookworm) |
| debian | nvidia-graphics-drivers-tesla-460 | < nvidia-graphics-drivers-tesla 525.147.05-6 (bookworm) | nvidia-graphics-drivers-tesla 525.147.05-6 (bookworm) |
| debian | nvidia-graphics-drivers-tesla-470 | < nvidia-graphics-drivers-tesla 525.147.05-6 (bookworm) | nvidia-graphics-drivers-tesla 525.147.05-6 (bookworm) |
| debian | nvidia-graphics-drivers-tesla-535 | < nvidia-graphics-drivers-tesla 525.147.05-6 (bookworm) | nvidia-graphics-drivers-tesla 525.147.05-6 (bookworm) |
| debian | nvidia-graphics-drivers-tesla-550 | < nvidia-graphics-drivers-tesla 525.147.05-6 (bookworm) | nvidia-graphics-drivers-tesla 525.147.05-6 (bookworm) |
| debian | nvidia-open-gpu-kernel-modules | < nvidia-graphics-drivers-tesla 525.147.05-6 (bookworm) | nvidia-graphics-drivers-tesla 525.147.05-6 (bookworm) |
| nvidia | geforce | — | — |
| nvidia | geforce | — | — |
| nvidia | geforce | — | — |
| nvidia | guest_driver | — | — |
| nvidia | guest_driver | — | — |
| nvidia | guest_driver | — | — |
| nvidia | guest_driver | — | — |
| nvidia | tesla | — | — |
| nvidia | tesla | — | — |
| nvidia | tesla | — | — |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
nvidia-display-driver: NVIDIA Display Driver null pointer dereference
vendor_redhat·2025-10-23·CVSS 5.5
CVE-2025-23330 [MEDIUM] CWE-476 nvidia-display-driver: NVIDIA Display Driver null pointer dereference
nvidia-display-driver: NVIDIA Display Driver null pointer dereference
NVIDIA Display Driver for Linux contains a vulnerability where an attacker might be able to trigger a null pointer dereference. A successful exploit of this vulnerability might lead to denial of service.
A vulnerability exists in the NVIDIA display driver for Linux that allows a local, low-privileged user to trigger a NULL pointer dereference, which may result in a denial of service leading to damage to confidentiality,integrity and availability of the system.
Mitigation: Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
Package: rhelai1
Debian
CVE-2025-23330: nvidia-graphics-drivers - NVIDIA Display Driver for Linux contains a vulnerability where an attacker might...
vendor_debian·2025·CVSS 5.5
CVE-2025-23330 [MEDIUM] CVE-2025-23330: nvidia-graphics-drivers - NVIDIA Display Driver for Linux contains a vulnerability where an attacker might...
NVIDIA Display Driver for Linux contains a vulnerability where an attacker might be able to trigger a null pointer dereference. A successful exploit of this vulnerability might lead to denial of service.
Scope: local
bookworm: open
bullseye: open
forky: open
sid: open
trixie: open
GHSA
GHSA-6mjj-rq8q-jv56: NVIDIA Display Driver for Linux contains a vulnerability where an attacker might be able to trigger a null pointer dereference
ghsa_unreviewed·2025-10-23
CVE-2025-23330 [MEDIUM] CWE-476 GHSA-6mjj-rq8q-jv56: NVIDIA Display Driver for Linux contains a vulnerability where an attacker might be able to trigger a null pointer dereference
NVIDIA Display Driver for Linux contains a vulnerability where an attacker might be able to trigger a null pointer dereference. A successful exploit of this vulnerability might lead to denial of service.
OSV
CVE-2025-23330: NVIDIA Display Driver for Linux contains a vulnerability where an attacker might be able to trigger a null pointer dereference
osv·2025-10-23·CVSS 5.5
CVE-2025-23330 [MEDIUM] CVE-2025-23330: NVIDIA Display Driver for Linux contains a vulnerability where an attacker might be able to trigger a null pointer dereference
NVIDIA Display Driver for Linux contains a vulnerability where an attacker might be able to trigger a null pointer dereference. A successful exploit of this vulnerability might lead to denial of service.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2025-10-23
Published