« Volver al listado

CVE-2025-23269

Estado: AplazadaMedia (4.7)—

NVIDIA Jetson Linux contains a vulnerability in the kernel where an attacker may cause an exposure of sensitive information due to a shared microarchitectural predictor state that influences transient execution. A successful exploit of this vulnerability may lead to information disclosure.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Nvidia — Jetson LinuxAI

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2025-23269",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2025-23269",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2025-07-17T20:28:36.979958Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "psirt@nvidia.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 4.7,
          "attackVector": "LOCAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "HIGH",
          "availabilityImpact": "NONE",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 1
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@nvidia.com",
      "affectedData": [
        {
          "vendor": "NVIDIA",
          "product": "Jetson Orin and Xavier Devices",
          "versions": [
            {
              "status": "affected",
              "version": "NVIDIA Jetson Orin Series All versions prior to JP5.x: 35.6.2"
            },
            {
              "status": "affected",
              "version": "NVIDIA Jetson Orin Series All versions prior to JP6.x: 36.4.4"
            },
            {
              "status": "affected",
              "version": "NVIDIA Xavier Series All versions prior to JP5.x: 35.6.2"
            }
          ],
          "platforms": [
            "Jetson Linux"
          ],
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2025-07-17T21:15:25.550",
  "references": [
    {
      "url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5662",
      "source": "psirt@nvidia.com"
    }
  ],
  "vulnStatus": "Deferred",
  "descriptions": [
    {
      "lang": "en",
      "value": "NVIDIA Jetson Linux contains a vulnerability in the kernel where an attacker may cause an exposure of sensitive information due to a shared microarchitectural predictor state that influences transient execution. A successful exploit of this vulnerability may lead to information disclosure."
    },
    {
      "lang": "es",
      "value": "NVIDIA Jetson Linux contiene una vulnerabilidad en el kernel que permite a un atacante exponer información confidencial debido a un estado de predicción microarquitectónico compartido que influye en la ejecución transitoria. Explotar esta vulnerabilidad con éxito podría resultar en la divulgación de información."
    }
  ],
  "lastModified": "2026-06-17T08:53:04.480",
  "sourceIdentifier": "psirt@nvidia.com"
}