Description
NVIDIA ConnectX and BlueField contain a vulnerability in the command interface where a local user with virtual function (VF) access may cause a write out of bounds by crafted input. A successful exploit of this vulnerability may lead to arbitrary code execution on the device.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
NVIDIA BlueField GA
Default version status: unaffected
All versions prior to 46.3008affected
NVIDIA BlueField LTS22
Default version status: unaffected
All versions prior to 35.8002affected
NVIDIA BlueField LTS23
Default version status: unaffected
All versions prior to 39.8002affected
NVIDIA BlueField LTS24
Default version status: unaffected
All versions prior to 43.8002affected
NVIDIA ConnectX GA
Default version status: unaffected
All versions prior to 46.3008affected
NVIDIA ConnectX LTS22
Default version status: unaffected
All versions prior to 35.8002affected
NVIDIA ConnectX LTS23
Default version status: unaffected
All versions prior to 39.8002affected
NVIDIA ConnectX LTS24
Default version status: unaffected
All versions prior to 43.8002affected