CVE-2025-33215

MEDIUM6.8

NVIDIA SNAP-4 Container contains a vulnerability in the VIRTIO-BLK component where a malicious guest VM may cause use of out-of-range pointer offset by sending crafted messages

Published Mar 24, 2026

Modified 2 months ago

Details

NVIDIA SNAP-4 Container contains a vulnerability in the VIRTIO-BLK component where a malicious guest VM may cause use of out-of-range pointer offset by sending crafted messages. A successful exploit of this vulnerability may lead to a denial of service of the DPA and impact the availability of storage to other VMs.

References

WEB

https://nvd.nist.gov/vuln/detail/CVE-2025-33215

WEB

https://nvidia.custhelp.com/app/answers/detail/a_id/5744

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2025-33215

CVSS Analysis

CVSS v3.1

6.8

Exploitability

Attack Vector