Amazon Linux 2023 Security Advisory: ALAS2023NVIDIA-2025-050
Advisory Released Date: 2025-04-16
Advisory Updated Date: 2025-04-16
FAQs regarding Amazon Linux ALAS/CVE Severity
NVIDIA CUDA toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a user could cause an out-of-bounds read by passing a malformed ELF file to cuobjdump. A successful exploit of this vulnerability might lead to a partial denial of service. (CVE-2024-53870)
NVIDIA CUDA toolkit for all platforms contains a vulnerability in the nvdisasm binary, where a user could cause an out-of-bounds read by passing a malformed ELF file to nvdisasm. A successful exploit of this vulnerability might lead to a partial denial of service. (CVE-2024-53871)
NVIDIA CUDA toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a user could cause an out-of-bounds read by passing a malformed ELF file to cuobjdump. A successful exploit of this vulnerability might lead to a partial denial of service. (CVE-2024-53875)
Affected Packages:
cuda
Issue Correction:
Run dnf update cuda --releasever 2023.6.20250331 to update your system.
x86_64:
cuda-12.8.0-1.x86_64