CVE-2025-23259 - Vulnerability Details - OpenCVE

NVIDIA Mellanox DPDK contains a vulnerability in Poll Mode Driver (PMD), where an attacker on a VM in the system might be able to cause information disclosure and denial of service on the network interface.

No CVSS v4.0

Attack Vector Network

Attack Complexity High

Privileges Required None

Scope Unchanged

Confidentiality Impact Low

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00034.

Exploitation none

Automatable no

Technical Impact partial

Vendors	Products
Nvidia	Mellanox Os Mellanox Os Firmware

No data.

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

Vendors	Products
Nvidia	Mellanox Os Mellanox Os Firmware

References

Link	Providers
https://nvd.nist.gov/vuln/detail/CVE-2025-23259
https://nvidia.custhelp.com/app/answers/detail/a_id/5655
https://www.cve.org/CVERecord?id=CVE-2025-23259

History

Fri, 05 Sep 2025 14:15:00 +0000

Type	Values Removed	Values Added
First Time appeared		Nvidia Nvidia mellanox Os Nvidia mellanox Os Firmware
Vendors & Products		Nvidia Nvidia mellanox Os Nvidia mellanox Os Firmware

Thu, 04 Sep 2025 19:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Thu, 04 Sep 2025 16:00:00 +0000

Type	Values Removed	Values Added
Description		NVIDIA Mellanox DPDK contains a vulnerability in Poll Mode Driver (PMD), where an attacker on a VM in the system might be able to cause information disclosure and denial of service on the network interface.
Weaknesses		CWE-362
References		https://nvd.nist.gov/vuln/detail/CVE-2025-23259 https://nvidia.custhelp.com/app/answers/detail/a_id/5655 https://www.cve.org/CVERecord?id=CVE-2025-23259
Metrics		cvssV3_1 `{'score': 6.5, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H'}`

MITRE

Status: PUBLISHED

Assigner: nvidia

Published: 2025-09-04T15:52:05.610Z

Updated: 2025-09-04T18:57:49.604Z

Reserved: 2025-01-14T01:06:22.263Z

Link: CVE-2025-23259

Vulnrichment

Updated: 2025-09-04T18:51:40.882Z

NVD

Status : Awaiting Analysis

Published: 2025-09-04T16:15:34.293

Modified: 2025-09-05T17:47:24.833

Link: CVE-2025-23259

Redhat

No data.

OpenCVE Enrichment

Updated: 2025-09-05T14:02:50Z

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2025-23259", "assignerOrgId": "9576f279-3576-44b5-a4af-b9a8644b2de6", "state": "PUBLISHED", "assignerShortName": "nvidia", "dateReserved": "2025-01-14T01:06:22.263Z", "datePublished": "2025-09-04T15:52:05.610Z", "dateUpdated": "2025-09-04T18:57:49.604Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "platforms": ["Any-22.11_2504"], "product": "Mellanox DPDK 22.11", "vendor": "NVIDIA", "versions": [{"status": "affected", "version": "All versions prior to 22.11_2504.1.0"}]}, {"defaultStatus": "unaffected", "platforms": ["Any-22.11_2410"], "product": "Mellanox DPDK 22.11", "vendor": "NVIDIA", "versions": [{"status": "affected", "version": "All versions prior to 22.11_2410 LTS"}]}, {"defaultStatus": "unaffected", "platforms": ["Any-22.11_2310"], "product": "Mellanox DPDK 22.11", "vendor": "NVIDIA", "versions": [{"status": "affected", "version": "All versions prior to 22.11_2310 LTS"}]}, {"defaultStatus": "unaffected", "platforms": ["Any-20.11_7"], "product": "Mellanox DPDK 20.11", "vendor": "NVIDIA", "versions": [{"status": "affected", "version": "All versions prior to 20.11_7.8.0 LTS"}]}, {"defaultStatus": "unaffected", "platforms": ["Any-25.07"], "product": "Upstream DPDK", "vendor": "NVIDIA", "versions": [{"status": "affected", "version": "All versions prior to 25.07"}]}, {"defaultStatus": "unaffected", "platforms": ["Any-24.11.3"], "product": "Upstream DPDK", "vendor": "NVIDIA", "versions": [{"status": "affected", "version": "All versions prior to 24.11.3 LTS"}]}, {"defaultStatus": "unaffected", "platforms": ["Any-23.11.5"], "product": "Upstream DPDK", "vendor": "NVIDIA", "versions": [{"status": "affected", "version": "All versions prior to 23.11.5 LTS"}]}, {"defaultStatus": "unaffected", "platforms": ["Any-22.11.10"], "product": "Upstream DPDK", "vendor": "NVIDIA", "versions": [{"status": "affected", "version": "All versions prior to 22.11.10 LTS"}]}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": true, "type": "text/html", "value": "NVIDIA Mellanox DPDK contains a vulnerability in Poll Mode Driver (PMD), where an attacker on a VM in the system might be able to cause information disclosure and denial of service on the network interface."}], "value": "NVIDIA Mellanox DPDK contains a vulnerability in Poll Mode Driver (PMD), where an attacker on a VM in the system might be able to cause information disclosure and denial of service on the network interface."}], "impacts": [{"descriptions": [{"lang": "en", "value": "Denial of Service, Information Disclosure"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-362", "description": "CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "9576f279-3576-44b5-a4af-b9a8644b2de6", "shortName": "nvidia", "dateUpdated": "2025-09-04T15:52:05.610Z"}, "references": [{"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-23259"}, {"url": "https://www.cve.org/CVERecord?id=CVE-2025-23259"}, {"url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5655"}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "NVIDIA PSIRT"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-09-04T18:51:38.511997Z", "id": "CVE-2025-23259", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-09-04T18:57:49.604Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-23259", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-09-04T18:51:38.511997Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-09-04T18:51:40.882Z"}}], "cna": {"source": {"discovery": "UNKNOWN"}, "impacts": [{"descriptions": [{"lang": "en", "value": "Denial of Service, Information Disclosure"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "NVIDIA", "product": "Mellanox DPDK 22.11", "versions": [{"status": "affected", "version": "All versions prior to 22.11_2504.1.0"}], "platforms": ["Any-22.11_2504"], "defaultStatus": "unaffected"}, {"vendor": "NVIDIA", "product": "Mellanox DPDK 22.11", "versions": [{"status": "affected", "version": "All versions prior to 22.11_2410 LTS"}], "platforms": ["Any-22.11_2410"], "defaultStatus": "unaffected"}, {"vendor": "NVIDIA", "product": "Mellanox DPDK 22.11", "versions": [{"status": "affected", "version": "All versions prior to 22.11_2310 LTS"}], "platforms": ["Any-22.11_2310"], "defaultStatus": "unaffected"}, {"vendor": "NVIDIA", "product": "Mellanox DPDK 20.11", "versions": [{"status": "affected", "version": "All versions prior to 20.11_7.8.0 LTS"}], "platforms": ["Any-20.11_7"], "defaultStatus": "unaffected"}, {"vendor": "NVIDIA", "product": "Upstream DPDK", "versions": [{"status": "affected", "version": "All versions prior to 25.07"}], "platforms": ["Any-25.07"], "defaultStatus": "unaffected"}, {"vendor": "NVIDIA", "product": "Upstream DPDK", "versions": [{"status": "affected", "version": "All versions prior to 24.11.3 LTS"}], "platforms": ["Any-24.11.3"], "defaultStatus": "unaffected"}, {"vendor": "NVIDIA", "product": "Upstream DPDK", "versions": [{"status": "affected", "version": "All versions prior to 23.11.5 LTS"}], "platforms": ["Any-23.11.5"], "defaultStatus": "unaffected"}, {"vendor": "NVIDIA", "product": "Upstream DPDK", "versions": [{"status": "affected", "version": "All versions prior to 22.11.10 LTS"}], "platforms": ["Any-22.11.10"], "defaultStatus": "unaffected"}], "references": [{"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-23259"}, {"url": "https://www.cve.org/CVERecord?id=CVE-2025-23259"}, {"url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5655"}], "x_generator": {"engine": "NVIDIA PSIRT"}, "descriptions": [{"lang": "en", "value": "NVIDIA Mellanox DPDK contains a vulnerability in Poll Mode Driver (PMD), where an attacker on a VM in the system might be able to cause information disclosure and denial of service on the network interface.", "supportingMedia": [{"type": "text/html", "value": "NVIDIA Mellanox DPDK contains a vulnerability in Poll Mode Driver (PMD), where an attacker on a VM in the system might be able to cause information disclosure and denial of service on the network interface.", "base64": true}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-362", "description": "CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')"}]}], "providerMetadata": {"orgId": "9576f279-3576-44b5-a4af-b9a8644b2de6", "shortName": "nvidia", "dateUpdated": "2025-09-04T15:52:05.610Z"}}}, "cveMetadata": {"cveId": "CVE-2025-23259", "state": "PUBLISHED", "dateUpdated": "2025-09-04T18:57:49.604Z", "dateReserved": "2025-01-14T01:06:22.263Z", "assignerOrgId": "9576f279-3576-44b5-a4af-b9a8644b2de6", "datePublished": "2025-09-04T15:52:05.610Z", "assignerShortName": "nvidia"}, "dataVersion": "5.1"}