CVE-2025-33207
NVIDIA ConnectX and Bluefield contain a vulnerability in a control register, where a user with VF access could cause improper access control
CVSS
6.8
Medium
EPSS
0.2%
p4
KEV
—
Exploit Today
1
0-100
Published: Sep 29, 2026 · Last modified: Oct 14, 2026 · CWE-1262
0.2%EPSS · 30 days0.2%
2026-09-302026-10-19
NVIDIA ConnectX and Bluefield contain a vulnerability in a control register, where a user with VF access could cause improper access control for the register interface by sending a malicious command to the firmware. A successful exploit of this vulnerability might lead to denial of service.
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2025-54509—2.2%
——1Improper access control for register interface in the Input-Output Memory Management Unit (IOMMU) could allow a privileged attacker to cause non-coherent accesses by the AMD Secure Processor (ASP), potentially resulting in loss of integrity.89dCVE-2025-207884.4 MED0.1%
——0In GPU pdma, there is a possible memory corruption due to a missing permission check. This could lead to local denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS10117735; Issue ID: MSV-4539.2d