NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where an attacker could read invalid memory. A successful exploit of this vulnerability might lead to information disclosure.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where an attacker could read
    invalid memory. A successful exploit of this vulnerability might lead to information disclosure.
    (CVE-2025-23286)

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4752 advisory.

    -------------------------------------------------------------------------     Debian LTS Advisory DLA-4752-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                         Tobias Frost     August 24, 2026                               https://wiki.debian.org/LTS
    -------------------------------------------------------------------------

    Package        : nvidia-graphics-drivers     Version        : 535.309.01-0+deb11u1     CVE ID         : CVE-2022-21813 CVE-2022-21814 CVE-2022-28181 CVE-2022-28183                      CVE-2022-28184 CVE-2022-28185 CVE-2022-28191 CVE-2022-28192                      CVE-2022-31607 CVE-2022-31608 CVE-2022-31615 CVE-2022-34670                      CVE-2022-34674 CVE-2022-34675 CVE-2022-34677 CVE-2022-34679                      CVE-2022-34680 CVE-2022-34682 CVE-2022-34684 CVE-2022-42254                      CVE-2022-42255 CVE-2022-42256 CVE-2022-42257 CVE-2022-42258                      CVE-2022-42259 CVE-2022-42260 CVE-2022-42261 CVE-2022-42262                      CVE-2022-42263 CVE-2022-42264 CVE-2022-42265 CVE-2023-0180                      CVE-2023-0183 CVE-2023-0184 CVE-2023-0185 CVE-2023-0187                      CVE-2023-0188 CVE-2023-0189 CVE-2023-0190 CVE-2023-0191                      CVE-2023-0194 CVE-2023-0195 CVE-2023-0198 CVE-2023-0199                      CVE-2023-25515 CVE-2023-25516 CVE-2023-31022 CVE-2024-0074                      CVE-2024-0075 CVE-2024-0078 CVE-2024-0090 CVE-2024-0092                      CVE-2024-0126 CVE-2024-0131 CVE-2024-0147 CVE-2024-0149                      CVE-2024-0150 CVE-2025-23244 CVE-2025-23279 CVE-2025-23280                      CVE-2025-23282 CVE-2025-23286 CVE-2025-23300 CVE-2025-23330                      CVE-2025-23332 CVE-2025-23345 CVE-2025-33219     Debian Bug     : 1004847 1011140 1012514 1012713 1012815 1013462 1014283 1016614 1016621 1020761 1021958     1022165 1025279 1025883 1027790 1028259 1028496 1030336 1030981 1031080 1031185 1032647 1033418 1033602     1033774 1037468 1038006 1039678 1041991 1042081 1050809 1050935 1053562 1055136 1055503 1056384 1056557     1057078 1058081 1059339 1059581 1059590 1061269 1061597 1062281 1062932 1063363 1063881 1063910 1064194     1064983 1072142 1072722 1072792 1073744 1074350 1077841 1078424 1078425 1078462 1078489 1081314 1082725     1084844 1085968 1089513 1089811 1092957 1093246 1093908 1094903 1095032 1104068 1109907 1118679

    The update of nvidia-graphics-drivers for Debian 11 (bullseye) updates the     NVIDIA driver from version 470.256.02 to 535.309.01. The update addresses     numerous security vulnerabilities affecting the NVIDIA driver stack.

    Alongside the driver update, the auxiliary packages nvidia-settings and     nvidia-modprobe have also been updated to 535.309.01-0+deb11u1, as these     are required by the newer driver.

    For the detailed security status of nvidia-graphics-drivers and details about     the vulnerabilities, please refer to     https://security-tracker.debian.org/tracker/nvidia-graphics-drivers

    For Debian 11 bullseye, these problems have been fixed in version     535.309.01-0+deb11u1.

    We recommend that you upgrade your nvidia-graphics-drivers packages.

    For the detailed security status of nvidia-graphics-drivers please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/nvidia-graphics-drivers

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS     Attachment:
    signature.asc     Description: PGP signature

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03424-1 advisory.

    Updated CUDA variant to 580.82.07:

    - CVE-2025-23277: Fixed access memory outside bounds permitted under normal       use cases in NVIDIA Display Driver (bsc#1247528).
    - CVE-2025-23278: Fixed improper index validation by issuing a call with       crafted parameters in NVIDIA Display Driver (bsc#1247529).
    - CVE-2025-23286: Fixed invalid memory read in NVIDIA GPU Display Driver (bsc#1247530).
    - CVE-2025-23283: Fixed stack buffer overflow triggerable by a malicious guest       in Virtual GPU Manager in NVIDIA vGPU software (bsc#1247531).
    - CVE-2025-23279: Fixed race condition that lead to privileges escalations       in NVIDIA .run Installer (bsc#1247532).

    Update non-CUDA variant to 580.82.07 (bsc#1249235).

    Other fixes:

    - Added Requires to be provided by special versions of nvidia-modprobe and       nvidia-persitenced built against SP4 (bsc#1237208, jsc#PED-13295).
    - Get rid of rule of older KMPs not to load nvidia_drm module, which       are still installed in parallel and therefore still active (bsc#1247923).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03247-1 advisory.

    Updated CUDA variant to 580.82.07:

    - CVE-2025-23277: Fixed access memory outside bounds permitted under normal       use cases in NVIDIA Display Driver (bsc#1247528).
    - CVE-2025-23278: Fixed improper index validation by issuing a call with       crafted parameters in NVIDIA Display Driver (bsc#1247529).
    - CVE-2025-23286: Fixed invalid memory read in NVIDIA GPU Display Driver (bsc#1247530).
    - CVE-2025-23283: Fixed stack buffer overflow triggerable by a malicious guest       in Virtual GPU Manager in NVIDIA vGPU software (bsc#1247531).
    - CVE-2025-23279: Fixed race condition that lead to privileges escalations       in NVIDIA .run Installer (bsc#1247532).

    Update non-CUDA variant to 580.82.07 (bsc#1249235).

    Other fixes:

    - Added Requires to be provided by special versions of nvidia-modprobe and       nvidia-persitenced built against SP4 (bsc#1237208, jsc#PED-13295).
    - Get rid of rule of older KMPs not to load nvidia_drm module,       which are still installed in parallel and therefore still       active (bsc#1247923).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03246-1 advisory.

    Updated CUDA variant to 580.82.07:

    - CVE-2025-23277: Fixed access to memory outside bounds permitted under normal       use cases in NVIDIA Display Driver (bsc#1247528).
    - CVE-2025-23278: Fixed improper index validation by issuing a call with       crafted parameters in NVIDIA Display Driver (bsc#1247529).
    - CVE-2025-23286: Fixed invalid memory read in NVIDIA GPU Display Driver (bsc#1247530).
    - CVE-2025-23283: Fixed stack buffer overflow triggerable by a malicious guest       in Virtual GPU Manager in NVIDIA vGPU software (bsc#1247531).
    - CVE-2025-23279: Fixed race condition that leads to privileges escalations       in NVIDIA .run Installer (bsc#1247532).

    Update non-CUDA variant to 580.82.07 (bsc#1249235).

    Other fixes:

    - Added Requires to be provided by special versions of nvidia-modprobe and       nvidia-persitenced built against SP4 (bsc#1237208, jsc#PED-13295).
    - Get rid of rule of older KMPs not to load nvidia_drm module,       which are still installed in parallel and therefore still       active (bsc#1247923).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03062-1 advisory.

    Updated CUDA variant to 580.65.06:

    - CVE-2025-23277: Fixed access memory outside bounds permitted under normal       use cases in NVIDIA Display Driver (bsc#1247528)
    - CVE-2025-23278: Fixed improper index validation by issuing a call with       crafted parameters in NVIDIA Display Driver (bsc#1247529)
    - CVE-2025-23286: Fixed invalid memory read in NVIDIA GPU Display Driver (bsc#1247530)
    - CVE-2025-23283: Fixed stack buffer overflow triggerable by a malicious guest       in Virtual GPU Manager in NVIDIA vGPU software (bsc#1247531)
    - CVE-2025-23279: Fixed race condition that lead to privileges escalations       in NVIDIA .run Installer (bsc#1247532)


    Updated non-CUDA variant to 570.172.08 (bsc#1246327)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where an attacker could read     invalid memory. A successful exploit of this vulnerability might lead to information disclosure.
    (CVE-2025-23286)

Note that Nessus relies on the presence of the package as reported by the vendor.

A display driver installed on the remote Linux host is affected by multiple vulnerabilities, including the following:

  - NVIDIA Display Driver for Linux and Windows contains a vulnerability in the kernel mode driver, where an     attacker could access memory outside bounds permitted under normal use cases. A successful exploit of this     vulnerability might lead to denial of service, data tampering, or information disclosure. (CVE-2025-23277)

  - NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker might cause     an improper index validation by issuing a call with crafted parameters. A successful exploit of this     vulnerability might lead to data tampering  or denial of service. (CVE-2025-23278)

  - NVIDIA .run Installer for Linux and Solaris contains a vulnerability where an attacker could use a race     condition to escalate privileges. A successful exploit of this vulnerability might lead to code execution,     escalation of privileges, information disclosure, denial of service, or data tampering. (CVE-2025-23279)

Note that Nessus has not attempted to exploit these issues but has instead relied only on the driver's self-reported version number.

The NVIDIA Virtual GPU Manager software on the remote host is missing a security update. It is, therefore, affected by multiple vulnerabilities, including the following:

  - NVIDIA Display Driver for Linux and Windows contains a vulnerability in the kernel mode driver, where an     attacker could access memory outside bounds permitted under normal use cases. A successful exploit of this     vulnerability might lead to denial of service, data tampering, or information disclosure. (CVE-2025-23277)

  - NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker might cause     an improper index validation by issuing a call with crafted parameters. A successful exploit of this     vulnerability might lead to data tampering  or denial of service. (CVE-2025-23278)

  - NVIDIA .run Installer for Linux and Solaris contains a vulnerability where an attacker could use a race     condition to escalate privileges. A successful exploit of this vulnerability might lead to code execution,     escalation of privileges, information disclosure, denial of service, or data tampering. (CVE-2025-23279)

  - NVIDIA vGPU software for Linux-style hypervisors contains a vulnerability in the Virtual GPU Manager,     where a malicious guest could cause stack buffer overflow. A successful exploit of this vulnerability     might lead to code execution, denial of service, escalation of privileges, information disclosure,     or data tampering. (CVE-2025-23283)

  - NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a malicious guest could     cause a stack buffer overflow. A successful exploit of this vulnerability might lead to code execution,     denial of service, information disclosure, or data tampering. (CVE-2025-23284)

  - NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where it allows a guest     to access global resources. A successful exploit of this vulnerability might lead to denial of     service. (CVE-2025-23285)

  - NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a guest could get global     GPU metrics which may be influenced by work in other VMs. A successful exploit of this vulnerability     might lead to information disclosure. (CVE-2025-23290) 	Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
472623	Google: x11-drivers/nvidia-drivers-open535, x11-drivers/nvidia-drivers535: security update to 19216.0.12	Tenable Cloud Security	Google COS Security Checks	Local	medium
472623	Google: x11-drivers/nvidia-drivers-open535, x11-drivers/nvidia-drivers535: security update to 19216.0.12	Tenable Self-Hosted Container Security	Google COS Security Checks	Local	medium
472570	Google: x11-drivers/nvidia-drivers-open535, x11-drivers/nvidia-drivers535: security update to 18867.199.19	Tenable Cloud Security	Google COS Security Checks	Local	medium
472570	Google: x11-drivers/nvidia-drivers-open535, x11-drivers/nvidia-drivers535: security update to 18867.199.19	Tenable Self-Hosted Container Security	Google COS Security Checks	Local	medium
461983	Echo: nvidia-graphics-drivers: security update to 570.195.03	Tenable Cloud Security	Echo Local Security Checks	Local	medium
461983	Echo: nvidia-graphics-drivers: security update to 570.195.03	Tenable Self-Hosted Container Security	Echo Local Security Checks	Local	medium
451717	Google: x11-drivers/nvidia-drivers-open535, x11-drivers/nvidia-drivers535: security update to 18244.448.20	Tenable Cloud Security	Google COS Security Checks	Local	medium
451717	Google: x11-drivers/nvidia-drivers-open535, x11-drivers/nvidia-drivers535: security update to 18244.448.20	Tenable Self-Hosted Container Security	Google COS Security Checks	Local	medium
339047	Debian dla-4752 : firmware-nvidia-gsp - security update	Nessus	Debian Local Security Checks	Local	critical
266200	SUSE SLES15: nv-prefer-signed-open-driver / etc (SUSE-SU-2025:03424-1)	Nessus	SuSE Local Security Checks	Local	high
265407	SUSE SLED15: nv-prefer-signed-open-driver / etc (SUSE-SU-2025:03247-1)	Nessus	SuSE Local Security Checks	Local	high
265405	SUSE SLED15: nv-prefer-signed-open-driver / etc (SUSE-SU-2025:03246-1)	Nessus	SuSE Local Security Checks	Local	high
261228	SUSE SLES15: nv-prefer-signed-open-driver / etc (SUSE-SU-2025:03062-1)	Nessus	SuSE Local Security Checks	Local	high
249827	Linux Distros Unpatched Vulnerability : CVE-2025-23286	Nessus	Misc.	Local	medium
243282	NVIDIA Linux GPU Display Driver (July 2025)	Nessus	Misc.	Local	high
243281	NVIDIA Virtual GPU Manager Multiple Vulnerabilities (July 2025)	Nessus	Misc.	Local	high

Detections

Analytics

CVE-2025-23286

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium

medium

critical

high

high

high

high

medium

high

high