GPU VulnDB

Database/NVIDIA / GPU stack

ConnectX / BlueField firmware: Improper certificate validation

CVE-2024-0105NVIDIA / GPU stackcurated

Impact

Improper certificate validation -> malicious firmware/image accepted

Who can reach it

Network-adjacent attacker in the firmware update path

What to do

Flash NIC/DPU firmware; verify update chain; node reboot with tenant eviction

References

https://nvd.nist.gov/vuln/detail/CVE-2024-0105https://github.com/NVIDIA/product-security/tree/main/2024/5562

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.