CVE-2025-33219

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-01-28 · updated 2026-06-17
Weakness: CWE-190

Description

NVIDIA Display Driver for Linux contains a vulnerability in the NVIDIA kernel module where an attacker could cause an integer overflow or wraparound. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, or information disclosure.

Affected products

NVIDIA GeForce: All driver versions prior to 590.48.01, All driver versions prior to 580.126.09, All driver versions prior to 570.211.01, All driver versions prior to 535.288.01
NVIDIA Guest driver: from 580.105.08(All versions prior through and including vGPU software 19.3); from 570.195.03(All versions prior through and including vGPU software 18.5); from 535.274.02(All versions prior through and including vGPU software 16.12); from 580.105.08(All versions up through and including the November 2025 release)
NVIDIA RTX PRO, RTX, Quadro: All driver versions prior to 590.48.01, All driver versions prior to 580.126.09, All driver versions prior to 570.211.01, All driver versions prior to 535.288.01
NVIDIA Tesla: All driver versions prior to 590.48.01, All driver versions prior to 580.126.09, All driver versions prior to 570.211.01, All driver versions prior to 535.288.01
NVIDIA Virtual GPU Manager: from 580.105.06(All versions prior through and including vGPU software 19.3); from 570.195.02(All versions prior through and including vGPU software 18.5); from 535.274.03(All versions prior through and including vGPU software 16.12); from 580.105.06(All versions up through and including the November 2025 release)

References

Get alerted when CVE-2025-33219 or the next vulnerability affects your stack