CVE-2025-33207
NVIDIA ConnectX and Bluefield contain a vulnerability in a control register, where a user with VF access could cause improper access control for the register interface by sending a malicious command to the firmware. A successful exploit of this vulnerability might lead to denial of service.
- Published Sep 29, 2026
- CVSS 6.8 medium
- 0.2% chance of exploitation in the next 30 days (EPSS)