CVE-2025-23259

EUVD-2025-26732
NVIDIA Mellanox DPDK contains a vulnerability in Poll Mode Driver (PMD), where an attacker on a VM in the system might be able to cause information disclosure and denial of service on the network interface.
Race Condition
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.5 MEDIUM
NETWORK
HIGH
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 21.73%
Debian logo
Debian Releases
Debian Product
Codename
dpdk
bookworm
no-dsa
bookworm (security)
vulnerable
bullseye
postponed
bullseye (security)
vulnerable
forky
25.11.2-1
fixed
sid
25.11.2-1
fixed
trixie
24.11.4-0+deb13u1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
dpdk
bionic
needs-triage
focal
needs-triage
jammy
Fixed 21.11.9-0ubuntu0.22.04.2
released
noble
Fixed 23.11.4-0ubuntu0.24.04.2
released
plucky
Fixed 24.11.2-0ubuntu0.25.04.2
released
questing
not-affected
resolute
not-affected
xenial
needs-triage
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
dpdk
suse enterprise sap 15 SP6
22.11.10-150600.3.15.1
fixed
suse enterprise sap 15 SP7
24.11.4-150700.3.6.1
fixed
suse enterprise server 15 SP6
22.11.10-150600.3.15.1
fixed
suse enterprise server 15 SP7
24.11.4-150700.3.6.1
fixed
dpdk-devel
suse enterprise sap 15 SP6
22.11.10-150600.3.15.1
fixed
suse enterprise sap 15 SP7
24.11.4-150700.3.6.1
fixed
suse enterprise server 15 SP6
22.11.10-150600.3.15.1
fixed
suse enterprise server 15 SP7
24.11.4-150700.3.6.1
fixed
dpdk-thunderx
suse enterprise sap 15 SP6
22.11.10-150600.3.15.1
fixed
suse enterprise sap 15 SP7
24.11.4-150700.3.6.1
fixed
suse enterprise server 15 SP6
22.11.10-150600.3.15.1
fixed
suse enterprise server 15 SP7
24.11.4-150700.3.6.1
fixed
dpdk-thunderx-devel
suse enterprise sap 15 SP6
22.11.10-150600.3.15.1
fixed
suse enterprise sap 15 SP7
24.11.4-150700.3.6.1
fixed
suse enterprise server 15 SP6
22.11.10-150600.3.15.1
fixed
suse enterprise server 15 SP7
24.11.4-150700.3.6.1
fixed
dpdk-tools
suse enterprise sap 15 SP6
22.11.10-150600.3.15.1
fixed
suse enterprise sap 15 SP7
24.11.4-150700.3.6.1
fixed
suse enterprise server 15 SP6
22.11.10-150600.3.15.1
fixed
suse enterprise server 15 SP7
24.11.4-150700.3.6.1
fixed
dpdk22
suse enterprise sap 15 SP5
22.11.10-150500.5.10.1
fixed
suse enterprise server 15 SP5
22.11.10-150500.5.10.1
fixed
dpdk22-devel
suse enterprise sap 15 SP5
22.11.10-150500.5.10.1
fixed
suse enterprise server 15 SP5
22.11.10-150500.5.10.1
fixed
dpdk22-thunderx
suse enterprise sap 15 SP5
22.11.10-150500.5.10.1
fixed
suse enterprise server 15 SP5
22.11.10-150500.5.10.1
fixed
dpdk22-thunderx-devel
suse enterprise sap 15 SP5
22.11.10-150500.5.10.1
fixed
suse enterprise server 15 SP5
22.11.10-150500.5.10.1
fixed
dpdk22-tools
suse enterprise sap 15 SP5
22.11.10-150500.5.10.1
fixed
suse enterprise server 15 SP5
22.11.10-150500.5.10.1
fixed
libdpdk-23
suse enterprise sap 15 SP5
22.11.10-150500.5.10.1
fixed
suse enterprise sap 15 SP6
22.11.10-150600.3.15.1
fixed
suse enterprise server 15 SP5
22.11.10-150500.5.10.1
fixed
suse enterprise server 15 SP6
22.11.10-150600.3.15.1
fixed
libdpdk-25
suse enterprise sap 15 SP7
24.11.4-150700.3.6.1
fixed
suse enterprise server 15 SP7
24.11.4-150700.3.6.1
fixed
Common Weakness Enumeration
References
https://nvd.nist.gov/vuln/detail/CVE-2025-23259
https://nvidia.custhelp.com/app/answers/detail/a_id/5655
https://www.cve.org/CVERecord?id=CVE-2025-23259