NVIDIA disclose new security flaw in their Linux GPU drivers

By Liam Dawe - 24 Apr 2025 at 4:18 pm UTC

NVIDIA sent out a security bulletin today to reveal a fresh security flaw found in their Linux GPU drivers. So it’s time to get updating again to be safe.

Noted down as CVE‑2025‑23244 here’s their explanation:

NVIDIA GPU Display Driver for Linux contains a vulnerability which could allow an unprivileged attacker to escalate permissions. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

There’s a number of different driver series, so you’ll need to check what you’re currently on to see the best version upgrade. If you’re on any of these you’ll be fine: 535.247.01, 550.163.01, 570.133.07 and 575.51.02.

See more on the NVIDIA website.

Article taken from GamingOnLinux.com.

Tags: Security, Drivers, Misc, NVIDIA

6 Likes

About the author - Liam Dawe

I am the owner of GamingOnLinux. After discovering Linux back in the days of Mandrake in 2003, I constantly checked on the progress of Linux until Ubuntu appeared on the scene and it helped me to really love it. You can reach me easily by emailing GamingOnLinux directly. You can also follow my personal adventures on Bluesky.
See more from me

Some you may have missed, popular articles from the last month:

Temtem: Swarm recently hit 100K sales and a big update is out now

Luck be a Landlord dev's bullet heaven roguelite Maze Mice arrives May 2

Wine 10.6 released with improvements to Bcrypt, Command Processor and WindowsCodecs

Ludaro puts a roguelike deck-building twist on the classic board game Ludo

You can also find comments for this article on social media: Mastodon

All posts need to follow our rules. For users logged in: please hit the Report Flag icon on any post that breaks the rules or contains illegal / harmful content. Guest readers can email us for any issues.

3 comments

Bogomips 9 hours ago

For once I was lucky I updated my drivers this morning ^^

0 Likes

redneckdrow 5 hours ago

Not to mention Bruce Schneier's blog about a new rootkit "discovered" (read: written) by ARMO:

https://www.schneier.com/blog/archives/2025/04/new-linux-rootkit.html

ARMO claim that they have a product to stop this type of attack.

Or one can simply disable io_uring by running sysctl kernel.io_uring_disabled = 1 as root to disable it temporarily, or adding the following line in /etc/sysctl.d/99-sysctl.conf:

kernel.io_uring_disabled = 1

and reboot to disable it altogether.

Edit: forgot kernel

Last edited by redneckdrow on 24 Apr 2025 at 11:06 pm UTC

0 Likes

Marlock 3 hours ago

the link above says the attackers use io.uring to bypass detection by monitoring tools, so it seems io.uring isn't an exploitable vulnerability per se, only a way already invaded systems will keep invaded in heavily monitored environments

0 Likes

While you're here, please consider supporting GamingOnLinux on:

Reward Tiers: Patreon. Plain Donations:

PayPal.

This ensures all of our main content remains totally free for everyone! Patreon supporters can also remove all adverts and sponsors! Supporting us helps bring good, fresh content. Without your continued support, we simply could not continue!

You can find even more ways to support us on this dedicated page any time. If you already are, thank you!