CVE-2025-23299: NVIDIA Bluefield Ga

Medium severity, CVSS 6.7. EPSS: 0.2% chance of exploitation in the next 30 days.

NVIDIA Bluefield and ConnectX contain a vulnerability in the management interface that could allow a malicious actor with high privilege access to execute arbitrary code.

Affected products

• NVIDIA Bluefield Ga: before 46.1006 (fixed in 46.1006)
• NVIDIA Bluefield LTS22: before 35.4554 (fixed in 35.4554)
• NVIDIA Bluefield LTS23: before 39.5050 (fixed in 39.5050)
• NVIDIA Bluefield LTS24: before 43.3608 (fixed in 43.3608)
• NVIDIA Connectx-4 Lx: before 32.1908 (fixed in 32.1908)
• NVIDIA Connectx Ga: before 46.1006 (fixed in 46.1006)
• NVIDIA Connectx LTS22: before 35.4554 (fixed in 35.4554)
• NVIDIA Connectx LTS23: before 39.5050 (fixed in 39.5050)
• NVIDIA Connectx LTS24: before 43.3608 (fixed in 43.3608)

Published 2025-10-22. Last modified 2026-06-17.