CVE-2023-25511: 
CUDA Toolkit vulnerability analysis and mitigation

NVIDIA CUDA Toolkit for Linux and Windows contains a vulnerability (CVE-2023-25511) in cuobjdump, where a division-by-zero error may enable a user to cause a crash. The vulnerability was discovered by researchers zz zr and Zhaozixi105, and was disclosed on April 21, 2023. This vulnerability affects all versions of NVIDIA CUDA Toolkit prior to version 12.1.1 on both Linux and Windows operating systems (NVIDIA Advisory).

The vulnerability is classified as CWE-369 (Divide By Zero) and has been assigned a CVSS v3.1 Base Score of 3.3 (LOW) with the vector string CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L. The vulnerability requires local access and user interaction to be exploited, with no privileges required. The scope is unchanged, and the impact is limited to availability, with no impact on confidentiality or integrity (NVD).

A successful exploitation of this vulnerability may lead to a limited denial of service through a system crash. The impact is confined to availability, with no effect on system confidentiality or integrity (NVIDIA Advisory).

NVIDIA has released a security update to address this vulnerability. Users are advised to upgrade to CUDA Toolkit version 12.1 Update 1 or later. The update is available for download from the CUDA Toolkit Downloads page (NVIDIA Advisory).