What is the CVSS score of CVE-2025-33219?

CVE-2025-33219 has a CVSS 3.1 base score of 7.8 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of Linux are affected by CVE-2025-33219?

NVIDIA Display Driver for Linux contains a HIGH severity vulnerability (CVE-2025-33219) that could allow attackers to trigger a kernel-level integer overflow, potentially leading to system compromise…. A patch is available.

How to fix or mitigate CVE-2025-33219?

Within 24 hours: Inventory all Linux systems running NVIDIA Display Drivers and assess exposure in production vs. non-production environments. Within 7 days: Implement network segmentation to restrict direct access to GPU-enabled systems and disable unnecessary display driver features if workloads permit; test any available workarounds in non-production. Within 30 days: Monitor NVIDIA's security advisories for patch availability and establish an expedited patching plan; prioritize patching critical systems first.

Linux CVE-2025-33219

HIGH

Integer Overflow or Wraparound (CWE-190)

2026-01-28 psirt@nvidia.com

Linux Integer Overflow Denial Of Service Privilege Escalation Information Disclosure Suse

7.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.8 HIGH

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

SUSE

HIGH

qualitative

Primary rating from NVD.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Patch released

Apr 06, 2026 - 02:30 nvd

Patch available

Analysis Generated

Mar 12, 2026 - 21:54 vuln.today

CVE Published

Jan 28, 2026 - 18:16 nvd

HIGH 7.8

DescriptionCVE.org

NVIDIA Display Driver for Linux contains a vulnerability in the NVIDIA kernel module where an attacker could cause an integer overflow or wraparound. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, or information disclosure.

AnalysisAI

NVIDIA Display Driver for Linux contains a vulnerability in the NVIDIA kernel module where an attacker could cause an integer overflow or wraparound. [CVSS 7.8 HIGH]

Technical ContextAI

Classified as CWE-190 (Integer Overflow or Wraparound). Affects the NVIDIA kernel component of NVIDIA kernel module where an attacker. NVIDIA Display Driver for Linux contains a vulnerability in the NVIDIA kernel module where an attacker could cause an integer overflow or wraparound. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, or information disclosure.

Affected ProductsAI

Product: NVIDIA kernel module where an attacker. Component: NVIDIA kernel.

RemediationAI

Monitor vendor advisories for a patch.

Same weakness CWE-190 – Integer Overflow or Wraparound

View all

CVE-2013-2729 CRITICAL POC

9.8

CVE-2015-8651 HIGH

8.8

CVE-2012-5054 HIGH POC

8.8

CVE-2014-0569 CRITICAL POC

9.3

CVE-2017-3599 HIGH POC

7.5

CVE-2017-7529 HIGH

7.5

CVE-2016-1010 HIGH

8.8

CVE-2013-3940 CRITICAL

9.3

Same technique Integer Overflow

View all

CVE-2014-0497 CRITICAL POC

9.8

CVE-2013-2729 CRITICAL POC

9.8

CVE-2015-8651 HIGH

8.8

CVE-2012-5054 HIGH POC

8.8

CVE-2014-0569 CRITICAL POC

9.3

CVE-2017-3599 HIGH POC

7.5

CVE-2017-7529 HIGH

7.5

CVE-2016-1010 HIGH

8.8

Vendor StatusVendor

SUSE

Severity: High

Product	Status
SUSE Linux Enterprise Desktop 15 SP7	Fixed
SUSE Linux Enterprise High Performance Computing 15 SP7	Fixed
SUSE Linux Enterprise Micro 5.3	Fixed
SUSE Linux Enterprise Micro 5.4	Fixed
SUSE Linux Enterprise Micro 5.5	Fixed

CVE-2025-33219 vulnerability details – vuln.today

Back

SUSE Linux Enterprise Module for Basesystem 15 SP7	Fixed
SUSE Linux Enterprise Module for Public Cloud 15 SP7	Fixed
SUSE Linux Enterprise Server 15 SP7	Fixed
SUSE Linux Enterprise Server 16.0	Fixed
SUSE Linux Enterprise Server for SAP Applications 15 SP7	Fixed
SUSE Linux Enterprise Server for SAP applications 16.0	Fixed
SUSE Linux Micro 6.0	Fixed
SUSE Linux Micro 6.0	Fixed
SUSE Linux Micro 6.1	Fixed
SUSE Linux Micro 6.1	Fixed
SUSE Linux Micro 6.2	Fixed
openSUSE Leap 15.6	Fixed
SUSE Linux Enterprise High Performance Computing 15 SP4	Fixed
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS	Fixed
SUSE Linux Enterprise High Performance Computing 15 SP5	Fixed
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS	Fixed
SUSE Linux Enterprise Module for Basesystem 15 SP4	Fixed
SUSE Linux Enterprise Module for Basesystem 15 SP5	Fixed
SUSE Linux Enterprise Module for Basesystem 15 SP6	Fixed
SUSE Linux Enterprise Server 15 SP4	Fixed
SUSE Linux Enterprise Server 15 SP4-LTSS	Fixed
SUSE Linux Enterprise Server 15 SP5	Fixed
SUSE Linux Enterprise Server 15 SP5-LTSS	Fixed
SUSE Linux Enterprise Server 15 SP6	Fixed
SUSE Linux Enterprise Server 15 SP6-LTSS	Fixed
SUSE Linux Enterprise Server for SAP Applications 15 SP6	Fixed
SUSE Manager Proxy 4.3	Fixed
SUSE Manager Proxy LTS 4.3	Fixed
SUSE Manager Retail Branch Server 4.3	Fixed
SUSE Manager Retail Branch Server LTS 4.3	Fixed
SUSE Manager Server 4.3	Fixed
SUSE Manager Server LTS 4.3	Fixed
SUSE Linux Enterprise Desktop 15 SP4	Fixed
SUSE Linux Enterprise Desktop 15 SP5	Fixed
SUSE Linux Enterprise Desktop 15 SP6	Fixed
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS	Fixed
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS	Fixed
SUSE Linux Enterprise High Performance Computing 15 SP6	Fixed
SUSE Linux Enterprise Module for Public Cloud 15 SP6	Fixed
SUSE Linux Enterprise Real Time 15 SP4	Fixed
SUSE Linux Enterprise Server for SAP Applications 15 SP4	Fixed
SUSE Linux Enterprise Server for SAP Applications 15 SP5	Fixed
openSUSE Leap 15.4	Fixed
openSUSE Leap 15.5	Fixed
openSUSE Leap Micro 5.5	Fixed

Linux CVE-2025-33219

Severity by source

CVSS VectorNVD

Lifecycle Timeline

DescriptionCVE.org

AnalysisAI

Technical ContextAI

Affected ProductsAI

RemediationAI

Same weakness CWE-190 – Integer Overflow or Wraparound

Same technique Integer Overflow

Vendor StatusVendor

SUSE

Share

External POC / Exploit Code