Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2024-0106

NVIDIA ConnectX Host Firmware for the BlueField Data Processing Unit (DPU) contains a vulnerability where an attacker may cause an improper handling of insufficient privileges issu

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
nvidia

Description

NVIDIA ConnectX Host Firmware for the BlueField Data Processing Unit (DPU) contains a vulnerability where an attacker may cause an improper handling of insufficient privileges issue. A successful exploit of this vulnerability may lead to denial of service, data tampering, and limited information disclosure.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

NVIDIA BlueField 1

Default version status: unaffected

  • All versions prior to 18.31.1014affected

NVIDIA BlueField GA

Default version status: unaffected

  • All versions prior to xx.41.1000affected

NVIDIA BlueField LTS22

Default version status: unaffected

  • All versions prior to xx.35.4030affected

NVIDIA BlueField LTS23

Default version status: unaffected

  • All versions prior to xx.39.3560affected

References