CVE-2025-23308

Public on 2025-09-24
Modified on 2025-10-13
Description
NVIDIA CUDA Toolkit for all platforms contains a vulnerability in nvdisasm where an attacker may cause a heap-based buffer overflow by getting the user to run nvdisasm on a malicious ELF file. A successful exploit of this vulnerability may lead to arbitrary code execution at the privilege level of the user running nvdisasm.
Severity
Important severity
Important
See what this means
CVSS v3 Base Score
7.8
See breakdown

Affected Packages

Platform Package Release Date Advisory Status
Amazon Linux 2023 cuda 2025-10-14 ALAS2023NVIDIA-2025-193 Fixed
Amazon Linux 2023 cuda-13-0 2025-10-14 ALAS2023NVIDIA-2025-194 Fixed
Amazon Linux 2023 cuda-cccl-13-0 2025-10-14 ALAS2023NVIDIA-2025-192 Fixed
Amazon Linux 2023 cuda-command-line-tools-13-0 2025-10-14 ALAS2023NVIDIA-2025-191 Fixed
Amazon Linux 2023 cuda-compiler-13-0 2025-10-14 ALAS2023NVIDIA-2025-190 Fixed
Amazon Linux 2023 cuda-crt-13-0 2025-10-14 ALAS2023NVIDIA-2025-189 Fixed
Amazon Linux 2023 cuda-ctadvisor-13-0 2025-10-14 ALAS2023NVIDIA-2025-188 Fixed
Amazon Linux 2023 cuda-cudart-13-0 2025-10-14 ALAS2023NVIDIA-2025-187 Fixed
Amazon Linux 2023 cuda-culibos-13-0 2025-10-14 ALAS2023NVIDIA-2025-186 Fixed
Amazon Linux 2023 cuda-cuobjdump-13-0 2025-10-14 ALAS2023NVIDIA-2025-185 Fixed
Amazon Linux 2023 cuda-cupti-13-0 2025-10-14 ALAS2023NVIDIA-2025-184 Fixed
Amazon Linux 2023 cuda-cuxxfilt-13-0 2025-10-14 ALAS2023NVIDIA-2025-183 Fixed
Amazon Linux 2023 cuda-documentation-13-0 2025-10-14 ALAS2023NVIDIA-2025-182 Fixed
Amazon Linux 2023 cuda-gdb-13-0 2025-10-14 ALAS2023NVIDIA-2025-181 Fixed
Amazon Linux 2023 cuda-libraries-13-0 2025-10-14 ALAS2023NVIDIA-2025-180 Fixed
Amazon Linux 2023 cuda-libraries-devel-13-0 2025-10-14 ALAS2023NVIDIA-2025-179 Fixed
Amazon Linux 2023 cuda-minimal-build-13-0 2025-10-14 ALAS2023NVIDIA-2025-178 Fixed
Amazon Linux 2023 cuda-nsight-13-0 2025-10-14 ALAS2023NVIDIA-2025-177 Fixed
Amazon Linux 2023 cuda-nsight-compute-13-0 2025-10-14 ALAS2023NVIDIA-2025-176 Fixed
Amazon Linux 2023 cuda-nsight-systems-13-0 2025-10-14 ALAS2023NVIDIA-2025-175 Fixed
Amazon Linux 2023 cuda-nvcc-13-0 2025-10-14 ALAS2023NVIDIA-2025-174 Fixed
Amazon Linux 2023 cuda-nvdisasm-12-5 No Fix Planned
Amazon Linux 2023 cuda-nvdisasm-12-6 No Fix Planned
Amazon Linux 2023 cuda-nvdisasm-12-8 No Fix Planned
Amazon Linux 2023 cuda-nvdisasm-12-9 No Fix Planned
Amazon Linux 2023 cuda-nvdisasm-13-0 2025-08-04 ALAS2023NVIDIA-2025-145 Fixed
Amazon Linux 2023 cuda-nvml-devel-13-0 2025-10-14 ALAS2023NVIDIA-2025-173 Fixed
Amazon Linux 2023 cuda-nvprune-13-0 2025-10-14 ALAS2023NVIDIA-2025-172 Fixed
Amazon Linux 2023 cuda-nvrtc-13-0 2025-10-14 ALAS2023NVIDIA-2025-171 Fixed
Amazon Linux 2023 cuda-nvtx-13-0 2025-10-14 ALAS2023NVIDIA-2025-170 Fixed
Amazon Linux 2023 cuda-opencl-13-0 2025-10-14 ALAS2023NVIDIA-2025-169 Fixed
Amazon Linux 2023 cuda-profiler-api-13-0 2025-10-14 ALAS2023NVIDIA-2025-168 Fixed
Amazon Linux 2023 cuda-runtime-13-0 2025-10-14 ALAS2023NVIDIA-2025-167 Fixed
Amazon Linux 2023 cuda-sandbox-devel-13-0 2025-10-14 ALAS2023NVIDIA-2025-166 Fixed
Amazon Linux 2023 cuda-sanitizer-13-0 2025-10-14 ALAS2023NVIDIA-2025-165 Fixed
Amazon Linux 2023 cuda-toolkit 2025-10-14 ALAS2023NVIDIA-2025-162 Fixed
Amazon Linux 2023 cuda-toolkit-13 2025-10-14 ALAS2023NVIDIA-2025-163 Fixed
Amazon Linux 2023 cuda-toolkit-13-0 2025-10-14 ALAS2023NVIDIA-2025-164 Fixed
Amazon Linux 2023 cuda-tools-13-0 2025-10-14 ALAS2023NVIDIA-2025-161 Fixed
Amazon Linux 2023 cuda-visual-tools-13-0 2025-10-14 ALAS2023NVIDIA-2025-160 Fixed
Amazon Linux 2023 libcublas-13-0 2025-10-14 ALAS2023NVIDIA-2025-158 Fixed
Amazon Linux 2023 libcufft-13-0 2025-10-14 ALAS2023NVIDIA-2025-157 Fixed
Amazon Linux 2023 libcufile-13-0 2025-10-14 ALAS2023NVIDIA-2025-159 Fixed
Amazon Linux 2023 libcurand-13-0 2025-10-14 ALAS2023NVIDIA-2025-156 Fixed
Amazon Linux 2023 libcusolver-13-0 2025-10-14 ALAS2023NVIDIA-2025-155 Fixed
Amazon Linux 2023 libcusparse-13-0 2025-10-14 ALAS2023NVIDIA-2025-154 Fixed
Amazon Linux 2023 libnpp-13-0 2025-10-14 ALAS2023NVIDIA-2025-153 Fixed
Amazon Linux 2023 libnvfatbin-13-0 2025-10-14 ALAS2023NVIDIA-2025-152 Fixed
Amazon Linux 2023 libnvjitlink-13-0 2025-10-14 ALAS2023NVIDIA-2025-151 Fixed
Amazon Linux 2023 libnvjpeg-13-0 2025-10-14 ALAS2023NVIDIA-2025-150 Fixed
Amazon Linux 2023 libnvptxcompiler-13-0 2025-10-14 ALAS2023NVIDIA-2025-149 Fixed
Amazon Linux 2023 libnvvm-13-0 2025-10-14 ALAS2023NVIDIA-2025-148 Fixed
Amazon Linux 2023 nvidia-gds 2025-10-14 ALAS2023NVIDIA-2025-146 Fixed
Amazon Linux 2023 nvidia-gds-13-0 2025-10-14 ALAS2023NVIDIA-2025-147 Fixed

CVSS Scores

Score Type Score Vector
Amazon Linux CVSSv3 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H