CVE-2025-23345

The NVIDIA Display Driver R304 before 309.08, R340 before 341.44, R343 before 345.20, and R346 before 347.52 does not properly validate local client impersonation levels when performing a 'kernel administrator check,' which allows local users to gain administrator privileges via unspecified API calls.

The NVIDIA Display Driver for Linux contains a vulnerability in a kernel module, where a user could cause a race condition by reordering compiler or processor memory instructions. A successful exploit might lead to denial of service.

NVIDIA Display Driver for Linux contains a vulnerability in Multi-Instance GPU (MIG) partition management, where insecure default initialization of memory subsystem routing resources could lead to data corruption or a hang during partition reconfiguration, resulting in denial of service.

NVIDIA Display Driver for Linux has an out-of-bounds read vulnerability. Successful exploitation may lead to denial of service and information disclosure.

NVIDIA Display Driver for Linux has a vulnerability in UVM, where a user can cause improper input validation. Successful exploitation might lead to denial of service.

The NVIDIA Display Driver for Linux has a vulnerability in a kernel mode layer handler, where a user could cause improper permission handling. Successful exploitation might lead to denial of service, escalation of privileges, information disclosure, data tampering, and code execution.

NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure, data tampering, and code execution.

The NVIDIA Display Driver for Linux contains a vulnerability where an incorrect conversion between numeric types leads to a heap buffer overflow. Successful exploitation could lead to denial of service, privilege escalation, information disclosure, data tampering, and code execution.

The NVIDIA Display Driver for Windows has a time-of-check time-of-use vulnerability. Successful exploitation can lead to denial of service, privilege escalation, information disclosure, data tampering, and code execution.

NVIDIA Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a user could cause improper access to GPU resources. A successful exploit might lead to denial of service, escalation of privileges, information disclosure, data tampering, and code execution.