CVE-2024-0106: NVIDIA Bluefield 1

High severity, CVSS 8.7. EPSS: 0.2% chance of exploitation in the next 30 days.

NVIDIA ConnectX Host Firmware for the BlueField Data Processing Unit (DPU) contains a vulnerability where an attacker may cause an improper handling of insufficient privileges issue. A successful exploit of this vulnerability may lead to denial of service, data tampering, and limited information disclosure.

Affected products

• NVIDIA Bluefield 1: before 18.31.1014 (fixed in 18.31.1014)
• NVIDIA Bluefield Ga
• NVIDIA Bluefield LTS22
• NVIDIA Bluefield LTS23

Published 2024-11-01. Last modified 2026-06-17.