Description
NVIDIA ConnectX and Bluefield contain a vulnerability in a control register, where a user with VF access could cause improper access control for the register interface by sending a malicious command to the firmware. A successful exploit of this vulnerability might lead to denial of service.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
NVIDIA BlueField GA
Default version status: unaffected
All versions prior to 47.1020affected
NVIDIA BlueField LTS23
Default version status: unaffected
All versions prior to 39.5124affected
NVIDIA BlueField LTS24
Default version status: unaffected
All versions prior to 43.4100affected
NVIDIA ConnectX GA
Default version status: unaffected
All versions prior to 47.1020affected
NVIDIA ConnectX LTS23
Default version status: unaffected
All versions prior to 39.5124affected
NVIDIA ConnectX LTS24
Default version status: unaffected
All versions prior to 43.4100affected
NVIDIA ConnectX-5
Default version status: unaffected
All versions prior to 16.35.8008affected