CVE-2025-23263 HIGH

CVE-2025-23263

Vendor Nvidia

Product DOCA-Host and Mellanox OFED

Weakness CWE-279

Published July 17, 2025

Last update July 24, 2025

View on NVD All CVEs

CVSS base score

7.6/10

Attack vector Adjacent

Attack complexity Low

Privileges required Low

User interaction None

Confidentiality Low

Integrity High

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H

What the vulnerability does

01Description

NVIDIA DOCA-Host and Mellanox OFED contain a vulnerability in the VGT+ feature, where an attacker on a VM might cause escalation of privileges and denial of service on the VLAN.

Key dates

02Disclosure timeline

July 17, 2025 CVE published

July 24, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-23263 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/279.html

Related vulnerabilities

Identifiers

CVE CVE-2025-23263

CWE CWE-279

CVSS 7.6 / HIGH

Affected versions

Vendor Nvidia

Product DOCA-Host and Mellanox OFED

Affected DOCA-Host All versions prior to 2.5.4-0.0.9

Vendor Nvidia

Product DOCA-Host and Mellanox OFED

Affected DOCA-Host All versions prior to 2.9.3-0.2.2

Vendor Nvidia

Product DOCA-Host and Mellanox OFED

Affected DOCA-Host All versions prior to 3.0.0-058001

Vendor Nvidia

Product DOCA-Host and Mellanox OFED

Affected Mellanox OFED All versions prior to 5.8-7.0.6.1

Vendor Nvidia

Product DOCA-Host and Mellanox OFED

Affected Mellanox OFED All versions prior to 23.10-5.1.4.0

Vendor Nvidia

Product DOCA-Host and Mellanox OFED

Affected Mellanox OFED All versions prior to 24.10-3.2.5.0

CVE-2025-23263

01Description

02Disclosure timeline

03References

04Related CVE