NVIDIA ConnectX and Bluefield contain a vulnerability in a control register, where a user with VF access could cause improper access control for the register interface by sending a malicious command to the firmware. A successful exploit of this vulnerability might lead to denial of service.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
BlueField GA
Vendor
NVIDIA
Product
BlueField GA
Platforms
BlueField-2
Default status
unaffected
BlueField GA · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
All versions prior to 47.1020
affected
Unavailable
Unavailable
Unavailable
None listed
BlueField LTS23
Vendor
NVIDIA
Product
BlueField LTS23
Platforms
BlueField-2
Default status
unaffected
BlueField LTS23 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
All versions prior to 39.5124
affected
Unavailable
Unavailable
Unavailable
None listed
BlueField LTS24
Vendor
NVIDIA
Product
BlueField LTS24
Platforms
BlueField-2
Default status
unaffected
BlueField LTS24 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
All versions prior to 43.4100
affected
Unavailable
Unavailable
Unavailable
None listed
ConnectX GA
Vendor
NVIDIA
Product
ConnectX GA
Platforms
ConnectX-6 DE, ConnectX-6 DX, ConnectX-6 LX
Default status
unaffected
ConnectX GA · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
All versions prior to 47.1020
affected
Unavailable
Unavailable
Unavailable
None listed
ConnectX LTS23
Vendor
NVIDIA
Product
ConnectX LTS23
Platforms
ConnectX-6, ConnectX-6 DE, ConnectX-6 DX, ConnectX-6 LX
Default status
unaffected
ConnectX LTS23 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
All versions prior to 39.5124
affected
Unavailable
Unavailable
Unavailable
None listed
ConnectX LTS24
Vendor
NVIDIA
Product
ConnectX LTS24
Platforms
ConnectX-6, ConnectX-6 DE, ConnectX-6 DX, ConnectX-6 LX