CVE-2025-23326: linux kernel Integer/Buffer Overflow

Description

NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where an attacker could cause an integer overflow through a specially crafted input. A successful exploit of this vulnerability might lead to denial of service.

Is your site exposed to CVE-2025-23326?

Run a free security scan — no signup, results in seconds.

CVSS v3.1 Score

7.5

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness Type (CWE)

CWE-680 CWE-680

Affected Products

Vendor	Product	Versions
nvidia	triton_inference_server	< 25.05
linux	linux_kernel	All
microsoft	windows	All

References

Advisories & Patches

https://nvidia.custhelp.com/app/answers/detail/a_id/5687

Other References

https://nvd.nist.gov/vuln/detail/CVE-2025-23326 https://www.cve.org/CVERecord?id=CVE-2025-23326

Frequently Asked Questions

What is CVE-2025-23326? +

NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where an attacker could cause an integer overflow through a specially crafted input. A successful exploit of this vulnerability might lead to denial of service. It has a CVSS v3.1 base score of 7.5 (HIGH).

How severe is CVE-2025-23326? +

CVE-2025-23326 has a CVSS v3.1 score of 7.5 out of 10, rated HIGH. This is a high-severity vulnerability that should be prioritized for patching.

What products are affected by CVE-2025-23326? +

CVE-2025-23326 affects products from linux, microsoft, nvidia, specifically: linux_kernel, triton_inference_server, windows. Check the affected products table above for specific version ranges.

How do I check if I'm vulnerable to CVE-2025-23326? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

CVE-2025-53630

llama.cpp is an inference of several LLM models in C/C++. Integer Overflow in the gguf_init_from_file_impl function in ggml/src/gguf.cpp can lead …

CVE-2026-19313

An heap overflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to execute arbitrary code …

CVE-2026-95107

A ThreadX module chooses `object_size` when it calls `txm_module_object_allocate`. The Module Manager adds its own 16-byte private header to that …

CVE-2026-70651

libvips is a fast image processing library with low memory needs. Prior to version 8.18.3, libvips built without libtiff support …

CVE-2026-91189

The GUIX binary resource loader never checks that a font page's glyph range is well formed. `gx_page_header_first_glyph` and `gx_page_header_last_glyph` are …

CVE-2026-44627

Integer overflow to buffer overflow for some Intel(R) oneAPI Deep Neural Network Library (oneDNN) software before version v2026.0.0 within Ring …