Threat Intelligence Database

CVE-2025-33235 is a high-severity race condition vulnerability in the NVIDIA Resiliency Extension for Linux, specifically in its checkpointing core. This flaw allows an attacker with limited privileges and local access to exploit improper synchronization of shared resources, potentially leading to information disclosure, data tampering, denial of service, or privilege escalation. The vulnerability affects versions prior to 0.5.0 and 0.4.1. Exploitation does not require user interaction but does require local access with some privileges. No known exploits are currently in the wild. European organizations using NVIDIA Resiliency Extension in Linux environments should prioritize patching once updates are available and implement strict access controls to mitigate risk.

HighVulnerabilityGermanyFranceNetherlands+4#cve#cve-2025-33235#cwe-362

CVE-2025-33225 is a high-severity vulnerability in the NVIDIA Resiliency Extension for Linux, affecting versions prior to 0.5.0. It involves a symbolic link (symlink) following weakness in log aggregation, where attackers can predict log file names. Exploiting this flaw can lead to privilege escalation, arbitrary code execution, denial of service, information disclosure, and data tampering without requiring user interaction or prior authentication. The vulnerability has a CVSS score of 8.4, indicating significant risk. No known exploits are currently reported in the wild. European organizations using NVIDIA Resiliency Extension in Linux environments should prioritize patching once available and implement strict file system permissions and monitoring to mitigate risks. Countries with strong tech sectors and high adoption of NVIDIA products, such as Germany, France, and the UK, are most likely to be affected.

HighVulnerabilityGermanyFranceNetherlands+3#cve#cve-2025-33225#cwe-61