NVIDIA Linux GPU Display Driver (July 2025)

high Nessus Plugin ID 243282

Language:

Synopsis

The NVIDIA GPU display driver software on the remote Linux host is missing a vendor-supplied patch.

Description

A display driver installed on the remote Linux host is affected by multiple vulnerabilities, including the following:

- NVIDIA Display Driver for Linux and Windows contains a vulnerability in the kernel mode driver, where an attacker could access memory outside bounds permitted under normal use cases. A successful exploit of this vulnerability might lead to denial of service, data tampering, or information disclosure. (CVE-2025-23277)

- NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker might cause an improper index validation by issuing a call with crafted parameters. A successful exploit of this vulnerability might lead to data tampering or denial of service. (CVE-2025-23278)

- NVIDIA .run Installer for Linux and Solaris contains a vulnerability where an attacker could use a race condition to escalate privileges. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, denial of service, or data tampering. (CVE-2025-23279)

Note that Nessus has not attempted to exploit these issues but has instead relied only on the driver's self-reported version number.

Solution

Upgrade the NVIDIA graphics driver in accordance with the vendor advisory.

Plugin Details

Severity: High

ID: 243282

File Name: nvidia_unix_2025_7.nasl

Version: 1.1

Type: local

Agent: unix

Family: Misc.

Published: 8/1/2025

Updated: 8/1/2025

Configuration: Enable paranoid mode

Supported Sensors: Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: High

Score: 8.4

CVSS v2

Risk Factor: Medium

Base Score: 6.8

Vector: CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C

CVSS Score Source: CVE-2025-23277

CVSS v3

Risk Factor: High

Base Score: 7.3

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Vulnerability Information

CPE: cpe:/a:nvidia:gpu_driver

Required KB Items: Settings/ParanoidReport, NVIDIA_UNIX_Driver/Version, NVIDIA_UNIX_Driver/GPU_Model

Patch Publication Date: 7/25/2025

Vulnerability Publication Date: 7/25/2025

Reference Information

CVE: CVE-2025-23277, CVE-2025-23278, CVE-2025-23279, CVE-2025-23281, CVE-2025-23286, CVE-2025-23287

IAVA: 2025-A-0550

Detections

Analytics