← Database

CVE-2023-25525

HIGH CVSS: 7.5 Published: 2023-09-20 Modified: 2026-06-17

Description

NVIDIA Cumulus Linux contains a vulnerability in forwarding where a VxLAN-encapsulated IPv6 packet received on an SVI interface with DMAC/DIPv6 set to the link-local address of the SVI interface may be incorrectly forwarded. A successful exploit may lead to information disclosure.

Affected Platforms

Nvidia Cumulus Linux

Weakness Type

CWE-284, NVD-CWE-noinfo

References