CVE-2023-25519: NVIDIA Bluefield 1 Firmware

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

NVIDIA ConnectX Host Firmware for the BlueField Data Processing Unit contains a vulnerability where a restricted host may cause an incorrect user management error. A successful exploit of this vulnerability may lead to escalation of privileges. 

Affected products

• NVIDIA Bluefield 1 Firmware: from 18.24.1000
• NVIDIA Bluefield 2 Ga Firmware: before 24.38.1002 (fixed in 24.38.1002)
• NVIDIA Bluefield 2 LTS Firmware: before 24.35.3006 (fixed in 24.35.3006)
• NVIDIA Bluefield 3 Ga Firmware: before 32.38.1002 (fixed in 32.38.1002)

Published 2023-09-12. Last modified 2026-06-17.