GPU Display Driver: Access-control bypass

CVE-2025-23277NVIDIA / GPU stackcurated

Impact

Access-control bypass -> privesc

Who can reach it

Any tenant with a container

What to do

Driver upgrade; drain + reboot node

Fleet impact

How widespread

Universal - Linux and Windows driver

Cost to remediate

node-reboot

Why it hits the whole fleet

Out-of-bounds memory access in kernel mode from a local tenant: cheap denial of service against a whole GPU node

References

https://nvd.nist.gov/vuln/detail/CVE-2025-23277 https://github.com/NVIDIA/product-security/tree/main/2025/5670

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.