CVE-2025-23259

Publication date 4 September 2025

Last updated 9 October 2025

Ubuntu priority

Medium

Why this priority?

Cvss 3 Severity Score

6.5 · Medium

Score breakdown

Description

NVIDIA Mellanox DPDK contains a vulnerability in Poll Mode Driver (PMD), where an attacker on a VM in the system might be able to cause information disclosure and denial of service on the network interface.

Status

Package Ubuntu Release Status
dpdk 25.10 questing
Not affected
25.04 plucky
Fixed 24.11.2-0ubuntu0.25.04.2
24.04 LTS noble
Fixed 23.11.4-0ubuntu0.24.04.2
22.04 LTS jammy
Fixed 21.11.9-0ubuntu0.22.04.2
20.04 LTS focal
Needs evaluation
18.04 LTS bionic
Needs evaluation
16.04 LTS xenial
Needs evaluation

Patch details

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package Patch details
dpdk

Severity score breakdown

Parameter Value
Base score 6.5 · Medium
Attack vector Network
Attack complexity High
Privileges required None
User interaction None
Scope Unchanged
Confidentiality Low
Integrity impact None
Availability impact High
Vector CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H

References

Related Ubuntu Security Notices (USN)

Other references