CVE-2025-23281
Public on 2025-07-31
Modified on 2025-07-31
Description
NVIDIA GPU Display Driver for Windows contains a vulnerability where an attacker with local unprivileged access that con win a race condition might be able to trigger a use-after-free error. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, or information disclosure.
Severity
See what this means
CVSS v3 Base Score
See breakdown
Affected Packages
| Platform | Package | Release Date | Advisory | Status |
|---|---|---|---|---|
| Amazon Linux 2023 | kmod-nvidia-latest-dkms | Not Affected | ||
| Amazon Linux 2023 | nvidia-driver | Not Affected | ||
| Amazon Linux 2023 | nvidia-imex-570 | Not Affected | ||
| Amazon Linux 2023 | nvidia-kmod-common | Not Affected | ||
| Amazon Linux 2023 | nvidia-modprobe | Not Affected |
CVSS Scores
| Score Type | Score | Vector | |
|---|---|---|---|
| Amazon Linux | CVSSv3 | 7.0 | CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H |