CVE catalog

CVE-2023-25523

nvidia-cuda-toolkit: CVE-2023-25523

[CVE catalog]

Severity
Low
Published
Source
[NVD] · [CVE record]
EPSS
0.23% · Oct 25, 2026

NVIDIA CUDA toolkit for Linux and Windows contains a vulnerability in the nvdisasm binary file, where an attacker may cause a NULL pointer dereference by providing a user with a malformed ELF file. A successful exploit of this vulnerability may lead to a partial denial of service.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiannvidia-cuda-toolkitsid12.4.1-8.2fixed
Debiannvidia-cuda-toolkittrixie12.4.1-2fixed
Debiannvidia-cuda-toolkitbookworm11.8.0-5~deb12u1vulnerable

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debiannvidia-cuda-toolkitsourcesid12.2.0-3unimportantNot reported[1042766]
Debiannvidia-cuda-toolkitsourcetrixie12.2.0-3unimportantNot reported[1042766]
Debiannvidia-cuda-toolkitsourcebookworm(unfixed)unimportantNot reported[1042766]

[Debian bug #1042766]

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database]