Skip to content
CVE PROGRAM SOURCE RECORD7.6 High

CVE-2025-23263

NVIDIA DOCA-Host and Mellanox OFED contain a vulnerability in the VGT+ feature, where an attacker on a VM might cause escalation of privileges and denial of service on the VLAN.

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
nvidia

Description

NVIDIA DOCA-Host and Mellanox OFED contain a vulnerability in the VGT+ feature, where an attacker on a VM might cause escalation of privileges and denial of service on the VLAN.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

NVIDIA DOCA-Host and Mellanox OFED

Default version status: unaffected

  • DOCA-Host All versions prior to 2.5.4-0.0.9affected
  • DOCA-Host All versions prior to 2.9.3-0.2.2affected
  • DOCA-Host All versions prior to 3.0.0-058001affected
  • Mellanox OFED All versions prior to 5.8-7.0.6.1affected
  • Mellanox OFED All versions prior to 23.10-5.1.4.0affected
  • Mellanox OFED All versions prior to 24.10-3.2.5.0affected

References