CVE-2025-23302

Medium

Description

NVIDIA HGX and DGX contain a vulnerability where a misconfiguration of the LS10 could enable an attacker to set an unsafe debug access level. A successful exploit of this vulnerability might lead to denial of service.

SeverityMedium
CVSS4.2
Exploit probability—
ProductHGX, DGX Hopper
PublishedSep 4, 2025
First seenSep 4, 2025
Weakness typeCWE-1244CWE-1244

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
NVIDIA HGX, DGX HopperAll versions prior to and including 1.7.1—
NVIDIA HGX, DGX BlackwellAll versions prior to and including 1.2.0—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.