Source: nvidia-graphics-drivers
Severity: serious
Tags: security upstream
X-Debbugs-Cc: Debian Security Team <team@security.debian.org>
Control: clone -1 -2 -3 -4 -5 -6 -7 -8 -9 -10 -11
Control: reassign -2 src:nvidia-graphics-drivers-legacy-340xx 340.76-6
Control: retitle -2 nvidia-graphics-drivers-legacy-340xx: CVE-2025-23279, CVE-2025-23286
Control: tag -2 + wontfix
Control: reassign -3 src:nvidia-graphics-drivers-legacy-390xx 390.48-4
Control: retitle -3 nvidia-graphics-drivers-legacy-390xx: CVE-2025-23279, CVE-2025-23286
Control: tag -3 + wontfix
Control: reassign -4 src:nvidia-graphics-drivers-tesla-418 418.87.01-1
Control: retitle -4 nvidia-graphics-drivers-tesla-418: CVE-2025-23279, CVE-2025-23286
Control: tag -4 + wontfix
Control: reassign -5 src:nvidia-graphics-drivers-tesla-450 450.51.05-1
Control: retitle -5 nvidia-graphics-drivers-tesla-450: CVE-2025-23279, CVE-2025-23286
Control: tag -5 + wontfix
Control: close -5 450.248.02-4
Control: reassign -6 src:nvidia-graphics-drivers-tesla-460 460.32.03-1
Control: retitle -6 nvidia-graphics-drivers-tesla-460: CVE-2025-23279, CVE-2025-23286
Control: tag -6 + wontfix
Control: close -6 460.106.00-3
Control: reassign -7 src:nvidia-graphics-drivers-tesla-470 470.57.02-1
Control: retitle -7 nvidia-graphics-drivers-tesla-470: CVE-2025-23279, CVE-2025-23286
Control: tag -7 + wontfix
Control: reassign -8 src:nvidia-graphics-drivers-tesla 510.85.02-1
Control: retitle -8 nvidia-graphics-drivers-tesla: CVE-2025-23279, CVE-2025-23286
Control: found -8 515.48.07-1
Control: found -8 525.60.13-1
Control: tag -8 + wontfix
Control: close -8 525.147.05-6
Control: reassign -9 src:nvidia-open-gpu-kernel-modules 515.43.04-1
Control: retitle -9 nvidia-open-gpu-kernel-modules: CVE-2025-23279, CVE-2025-23286
Control: found -9 520.56.06-1
Control: found -9 525.85.12-1
Control: found -9 530.30.02-1
Control: found -9 535.43.02-1
Control: found -9 545.23.06-1
Control: found -9 550.40.07-1
Control: found -9 555.42.02-1
Control: found -9 560.28.03-1
Control: found -9 565.57.01-1
Control: found -9 570.86.16-1
Control: found -9 575.51.02-1
Control: reassign -10 src:nvidia-graphics-drivers-tesla-535 535.216.01-1
Control: retitle -10 nvidia-graphics-drivers-tesla-535: CVE-2025-23279, CVE-2025-23286
Control: reassign -11 src:nvidia-graphics-drivers-tesla-550 550.54.15-1
Control: retitle -11 nvidia-graphics-drivers-tesla-550: CVE-2025-23279, CVE-2025-23286
Control: tag -11 + wontfix
Control: found -1 340.24-1
Control: found -1 343.22-1
Control: found -1 396.18-1
Control: found -1 430.14-1
Control: found -1 455.23.04-1
Control: found -1 465.24.02-1
Control: found -1 495.44-1
Control: found -1 515.48.07-1
Control: found -1 520.56.06-1
Control: found -1 525.53-1
Control: found -1 530.30.02-1
Control: found -1 535.43.02-1
Control: found -1 545.23.06-1
Control: found -1 550.40.07-1
Control: found -1 555.42.02-1
Control: found -1 560.28.03-1
Control: found -1 565.57.01-1
Control: found -1 570.86.16-1
Control: found -1 575.51.02-1

https://nvidia.custhelp.com/app/answers/detail/a_id/5670

CVE‑2025‑23279	NVIDIA .run Installer for Linux and Solaris contains a
vulnerability where an attacker could use a race condition to escalate
privileges. A successful exploit of this vulnerability might lead to
coqe execution, escalation of privileges, information disclosure, denial
of service, or data tampering.

CVE‑2025‑23286	NVIDIA GPU Display Driver for Windows and Linux contains
a vulnerability where an attacker could read invalid memory. A
successful exploit of this vulnerability might lead to information
disclosure.

Linux Driver Branch	CVEs Addressed
R570			CVE-2025-23279
R535			CVE-2025-23279,  CVE-2025-23286

Driver Branch	Affected Driver Versions		Updated Driver Version

R575		All driver version prior to 575.64.05	575.64.05
R570		All driver version prior to 570.172.08	570.172.08
R535		All driver versions prior to 535.261.03 535.261.03

Andreas

We believe that the bug you reported is fixed in the latest version of
nvidia-graphics-drivers-tesla-535, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1109916@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Andreas Beckmann <anbe@debian.org> (supplier of updated nvidia-graphics-drivers-tesla-535 package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Sat, 26 Jul 2025 10:17:42 +0200
Source: nvidia-graphics-drivers-tesla-535
Architecture: source
Version: 535.261.03-1
Distribution: unstable
Urgency: medium
Maintainer: Debian NVIDIA Maintainers <pkg-nvidia-devel@lists.alioth.debian.org>
Changed-By: Andreas Beckmann <anbe@debian.org>
Closes: 1109916
Changes:
 nvidia-graphics-drivers-tesla-535 (535.261.03-1) unstable; urgency=medium
 .
   * New upstream LTS and Tesla branch release 535.261.03 (2025-07-17).
     * Fixed CVE-2025-23279, CVE-2025-23286.  (Closes: #1109916)
https://nvidia.custhelp.com/app/answers/detail/a_id/5670
     - Fixed a bug that could cause 32-bit x86 applications running on
       recent builds of glibc to crash on dlopen().
     - Fixed an issue that could cause render-offloaded applications using
       KDE Frameworks 6 to crash.
     * Improved compatibility with recent Linux kernels.
 .
   [ Andreas Beckmann ]
   * Refresh patches.
Checksums-Sha1:
 4bdab3bfff61bc364ee321a915121990b8125947 7401 nvidia-graphics-drivers-tesla-535_535.261.03-1.dsc
 0c1663f1561c7bfccb127c3a1325458bce4ab9c6 340509410 nvidia-graphics-drivers-tesla-535_535.261.03.orig-amd64.tar.gz
 8df13c69ea9efe22b61ed18549c70c5ceec95dc8 269488408 nvidia-graphics-drivers-tesla-535_535.261.03.orig-arm64.tar.gz
 e3501a9a7a7c404e6f0bbfc755aa627e133e3cab 139 nvidia-graphics-drivers-tesla-535_535.261.03.orig.tar.gz
 3ed5614b7002a53149b23df907d167418b33ef54 238348 nvidia-graphics-drivers-tesla-535_535.261.03-1.debian.tar.xz
 70d299bb625f2b51ac929600de2c713381dfb6d9 5500 nvidia-graphics-drivers-tesla-535_535.261.03-1_source.buildinfo
Checksums-Sha256:
 c56e43d542958dbcdf72b4dc2417b438f4e4fbb0c2bc22225b3f8e1053f0d9f7 7401 nvidia-graphics-drivers-tesla-535_535.261.03-1.dsc
 2dc4d0dc5495cb898b48f0d774a2620452e9f0e486eb5ddac3e0dfa3efbf3b82 340509410 nvidia-graphics-drivers-tesla-535_535.261.03.orig-amd64.tar.gz
 db51637fde3860307911fc7533233a4130b57fa0acbfd309cd7bf45576640325 269488408 nvidia-graphics-drivers-tesla-535_535.261.03.orig-arm64.tar.gz
 01471136d9f8c44b98fb91228dca9d1c493fd552fba026228614ee9f1bc6ee8f 139 nvidia-graphics-drivers-tesla-535_535.261.03.orig.tar.gz
 03681992c9b5ffe5e8f874883ba452cdc13cc70b217da21ef9ceaffc9a64ccc6 238348 nvidia-graphics-drivers-tesla-535_535.261.03-1.debian.tar.xz
 90867ab8767432f016a6a6a687832941481efcfeb1eedbb45fb01e5408672ddd 5500 nvidia-graphics-drivers-tesla-535_535.261.03-1_source.buildinfo
Files:
 284ad3fbb8bab3eade166ea4ae51082f 7401 non-free/libs optional nvidia-graphics-drivers-tesla-535_535.261.03-1.dsc
 88870f7847fccc0df277a79207ab8754 340509410 non-free/libs optional nvidia-graphics-drivers-tesla-535_535.261.03.orig-amd64.tar.gz
 bc6dfd099168a567277ab3e9452ee3da 269488408 non-free/libs optional nvidia-graphics-drivers-tesla-535_535.261.03.orig-arm64.tar.gz
 9cc9045d02c1abfc8a088d9265405080 139 non-free/libs optional nvidia-graphics-drivers-tesla-535_535.261.03.orig.tar.gz
 8338ae9a28ed668b5f90be9c31dbad13 238348 non-free/libs optional nvidia-graphics-drivers-tesla-535_535.261.03-1.debian.tar.xz
 4a7c096a3cc9a1023ddcd747add2966c 5500 non-free/libs optional nvidia-graphics-drivers-tesla-535_535.261.03-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----

iQJEBAEBCAAuFiEE6/MKMKjZxjvaRMaUX7M/k1np7QgFAmiEkecQHGFuYmVAZGVi
aWFuLm9yZwAKCRBfsz+TWentCFZ9D/9IwAiYnIlFFIcH3TLsR7ysUoq7euz3YQqa
MrmpSZ83f2Fw+Pj0vclfT6rjY5THK2x/xc04bG6F/VFO3Ry1/7rnFnsdDXgTdnJ/
ob8w9/7uwdmVy59yakBl81nW8QoCsYLTXKhTmemVl4arP/8ySzI4kqRuO2yp7CTM
Aw9jcdl7cfgMU+DkaQCpPJB9Z3XpqgYpb9fe7dWvjXy4Nv8vbRHhekXYvQLfwlrH
4Moik7bdH6aMQ6M5yI0sh1tbcoc1s252H8F3jQaJdx8aIpqYE5nHZENkOk9vSIug
S6etbYe9W7JAXkM3Ti93Q5n/FHhLFjbAcWKHsPU22dVFHPYh0TCwRSEYhu4TphVN
lHaAwLQYCJumAV4sGzklhWZALszVg6uyrc07WiDE/AsQvLp6NP7JxBCqFEA4jBxO
fHQVDowm9eV9qtHrOGKzB0wN2eATe3U5VsBOKMP2SASOToi+g5ET8aKygzBndxT1
JUmw1EmuMPdgELNj9xG7G5wC8YJHby9EUabX6ejtpUscmxk4G/DWJxankUASe7WL
9fjcoeKt4NrquXjiwH5CnwZEexIkJ7k4ib01dVsbV2F/FXSItsnq8JzWlxiv5NDf
tD83yu4+B9oXX+5QOrZY+7Sn8YElnF7mHtmIejZLIt2fvAM9vGbV2NU9voD+4Kec
fXY8v2PF9A==
=UyoX
-----END PGP SIGNATURE-----