Description
NVIDIA ConnectX Host Firmware for the BlueField Data Processing Unit contains a vulnerability where a restricted host may cause an incorrect user management error. A successful exploit of this vulnerability may lead to escalation of privileges.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
NVIDIA BlueField 1
Default version status: unaffected
All versions after 18.24.1000affected
NVIDIA BlueField 2 LTS
Default version status: unaffected
All versions prior to 24.35.3006affected
NVIDIA BlueField 2 GA
Default version status: unaffected
All versions prior to 24.38.1002affected
NVIDIA BlueField 3 GA
Default version status: unaffected
All versions prior to 32.38.1002affected