CVE-2025-23269

Medium

Description

NVIDIA Jetson Linux contains a vulnerability in the kernel where an attacker may cause an exposure of sensitive information due to a shared microarchitectural predictor state that influences transient execution. A successful exploit of this vulnerability may lead to information disclosure.

SeverityMedium
CVSS4.7
Exploit probability—
ProductJetson Orin and Xavier Devices
PublishedJul 17, 2025
First seenJul 17, 2025
Weakness typeCWE-1423CWE-1423

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
NVIDIA Jetson Orin and Xavier DevicesNVIDIA Jetson Orin Series All versions prior to JP5.x: 35.6.2, NVIDIA Jetson Orin Series All versions prior to JP6.x: 36.4.4, NVIDIA Xavier Series All versions prior to JP5.x: 35.6.2—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.