Heap Overflow Vulnerability in linux-nvidia Package - USN-7325-2
Summary
USN-7325-2: linux-nvidia vulnerabilities. Affects linux-nvidia versions < 6.8.0-1023.26. Fixed in 6.8.0-1023.26. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The linux-nvidia package is a critical component of the Ubuntu operating system, specifically designed to provide support for NVIDIA graphics hardware. It includes drivers and tools necessary for optimal performance and functionality of NVIDIA GPUs. This package is essential for users who rely on NVIDIA graphics for gaming, professional graphics work, or general computing tasks. However, the package has been found to contain vulnerabilities that could potentially compromise system security.
Vulnerability Detail
A heap overflow vulnerability was discovered in the HFS+ file system implementation within the Linux Kernel. This vulnerability, identified as CVE-2025-0927, allows an attacker to exploit a specially crafted file system image. When this image is mounted, it could lead to a denial of service, causing the system to crash, or potentially allow the execution of arbitrary code. Additionally, other security issues were identified in the Linux kernel that could be leveraged by attackers to compromise the system.
How To Fix
Minimum fixed version
6.8.0-1023.26
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linux-nvidiaTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can avoid mounting untrusted HFS+ file system images until the package is updated. This will help mitigate the risk of exploitation until the vulnerability is resolved.
Conclusion
The linux-nvidia package has been identified with critical vulnerabilities that could compromise system security. Users are strongly advised to update to the patched version 6.8.0-1023.26 to mitigate these risks. In the meantime, avoiding untrusted file system images can help protect against potential exploitation.
See every vulnerability recorded for linux-nvidia →
FAQ
The linux-nvidia package provides drivers and tools for NVIDIA graphics hardware on Ubuntu systems, ensuring optimal performance and compatibility.
The heap overflow vulnerability allows attackers to exploit specially crafted file system images, potentially leading to system crashes or arbitrary code execution.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check your application without any signup.
If an immediate update is not possible, avoid mounting untrusted HFS+ file system images to reduce the risk of exploitation.
Yes, there are additional security issues identified in the Linux kernel that could also pose risks to system security.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux-nvidia.
