Security update for nvidia-open-driver-G06-signed

Announcement ID:	SUSE-SU-2025:03424-1
Release Date:	2025-09-29T09:02:01Z
Rating:	important
References:	bsc#1236658 bsc#1236746 bsc#1237208 bsc#1237308 bsc#1237585 bsc#1239139 bsc#1239653 bsc#1241231 bsc#1242054 bsc#1243192 bsc#1244614 bsc#1246010 bsc#1246327 bsc#1247528 bsc#1247529 bsc#1247530 bsc#1247531 bsc#1247532 bsc#1247907 bsc#1247923 bsc#1249235 jsc#PED-13295
Cross-References:	CVE-2025-23277 CVE-2025-23278 CVE-2025-23279 CVE-2025-23283 CVE-2025-23286
CVSS scores:	CVE-2025-23277 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H CVE-2025-23277 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H CVE-2025-23278 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H CVE-2025-23278 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H CVE-2025-23279 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2025-23279 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2025-23283 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2025-23283 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2025-23286 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N CVE-2025-23286 ( NVD ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Affected Products:	openSUSE Leap 15.4 SUSE Linux Enterprise High Performance Computing 15 SP4 SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 SUSE Linux Enterprise Micro 5.3 SUSE Linux Enterprise Micro 5.4 SUSE Linux Enterprise Micro for Rancher 5.3 SUSE Linux Enterprise Micro for Rancher 5.4 SUSE Linux Enterprise Server 15 SP4 SUSE Linux Enterprise Server 15 SP4 LTSS SUSE Linux Enterprise Server for SAP Applications 15 SP4 SUSE Manager Proxy 4.3 SUSE Manager Proxy 4.3 LTS SUSE Manager Retail Branch Server 4.3 SUSE Manager Retail Branch Server 4.3 LTS SUSE Manager Server 4.3 SUSE Manager Server 4.3 LTS

An update that solves five vulnerabilities, contains one feature and has 16 security fixes can now be installed.

Description:

This update for nvidia-open-driver-G06-signed fixes the following issues:

Updated CUDA variant to 580.82.07:

• CVE-2025-23277: Fixed access memory outside bounds permitted under normal use cases in NVIDIA Display Driver (bsc#1247528).
• CVE-2025-23278: Fixed improper index validation by issuing a call with crafted parameters in NVIDIA Display Driver (bsc#1247529).
• CVE-2025-23286: Fixed invalid memory read in NVIDIA GPU Display Driver (bsc#1247530).
• CVE-2025-23283: Fixed stack buffer overflow triggerable by a malicious guest in Virtual GPU Manager in NVIDIA vGPU software (bsc#1247531).
• CVE-2025-23279: Fixed race condition that lead to privileges escalations in NVIDIA .run Installer (bsc#1247532).

Update non-CUDA variant to 580.82.07 (bsc#1249235).

Other fixes:

• Added Requires to be provided by special versions of nvidia-modprobe and nvidia-persitenced built against SP4 (bsc#1237208, jsc#PED-13295).
• Get rid of rule of older KMPs not to load nvidia_drm module, which are still installed in parallel and therefore still active (bsc#1247923).

Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:

• openSUSE Leap 15.4
  zypper in -t patch SUSE-2025-3424=1
• SUSE Linux Enterprise Micro for Rancher 5.3
  zypper in -t patch SUSE-SLE-Micro-5.3-2025-3424=1
• SUSE Linux Enterprise Micro 5.3
  zypper in -t patch SUSE-SLE-Micro-5.3-2025-3424=1
• SUSE Linux Enterprise Micro for Rancher 5.4
  zypper in -t patch SUSE-SLE-Micro-5.4-2025-3424=1
• SUSE Linux Enterprise Micro 5.4
  zypper in -t patch SUSE-SLE-Micro-5.4-2025-3424=1
• SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4
  zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2025-3424=1
• SUSE Linux Enterprise High Performance Computing LTSS 15 SP4
  zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2025-3424=1
• SUSE Linux Enterprise Server 15 SP4 LTSS
  zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2025-3424=1
• SUSE Linux Enterprise Server for SAP Applications 15 SP4
  zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2025-3424=1
• SUSE Manager Proxy 4.3 LTS
  zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-LTS-2025-3424=1
• SUSE Manager Retail Branch Server 4.3 LTS
  zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.3-LTS-2025-3424=1
• SUSE Manager Server 4.3 LTS
  zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-LTS-2025-3424=1

Package List:

• openSUSE Leap 15.4 (aarch64 x86_64)
  • nvidia-open-driver-G06-signed-cuda-kmp-default-580.82.07_k5.14.21_150400.24.173-150400.98.1
  • nvidia-open-driver-G06-signed-cuda-debugsource-580.82.07-150400.98.1
  • nvidia-open-driver-G06-signed-kmp-default-580.82.07_k5.14.21_150400.24.173-150400.98.1
  • nvidia-open-driver-G06-signed-cuda-kmp-default-debuginfo-580.82.07_k5.14.21_150400.24.173-150400.98.1
  • nvidia-open-driver-G06-signed-debugsource-580.82.07-150400.98.1
  • nvidia-open-driver-G06-signed-cuda-default-devel-580.82.07-150400.98.1
  • nv-prefer-signed-open-driver-580.82.07-150400.98.1
  • nvidia-open-driver-G06-signed-kmp-default-debuginfo-580.82.07_k5.14.21_150400.24.173-150400.98.1
  • nvidia-open-driver-G06-signed-default-devel-580.82.07-150400.98.1
• openSUSE Leap 15.4 (aarch64)
  • nvidia-open-driver-G06-signed-64kb-devel-580.82.07-150400.98.1
  • nvidia-open-driver-G06-signed-cuda-64kb-devel-580.82.07-150400.98.1
  • nvidia-open-driver-G06-signed-cuda-kmp-64kb-580.82.07_k5.14.21_150400.24.173-150400.98.1
  • nvidia-open-driver-G06-signed-kmp-64kb-580.82.07_k5.14.21_150400.24.173-150400.98.1
  • nvidia-open-driver-G06-signed-cuda-kmp-64kb-debuginfo-580.82.07_k5.14.21_150400.24.173-150400.98.1
  • nvidia-open-driver-G06-signed-kmp-64kb-debuginfo-580.82.07_k5.14.21_150400.24.173-150400.98.1
• SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 x86_64)
  • nvidia-open-driver-G06-signed-cuda-kmp-default-580.82.07_k5.14.21_150400.24.173-150400.98.1
  • nvidia-open-driver-G06-signed-cuda-debugsource-580.82.07-150400.98.1
  • nvidia-open-driver-G06-signed-kmp-default-debuginfo-580.82.07_k5.14.21_150400.24.173-150400.98.1
  • nvidia-open-driver-G06-signed-cuda-kmp-default-debuginfo-580.82.07_k5.14.21_150400.24.173-150400.98.1
  • nvidia-open-driver-G06-signed-debugsource-580.82.07-150400.98.1
  • nv-prefer-signed-open-driver-580.82.07-150400.98.1
  • nvidia-open-driver-G06-signed-kmp-default-580.82.07_k5.14.21_150400.24.173-150400.98.1
• SUSE Linux Enterprise Micro 5.3 (aarch64 x86_64)
  • nvidia-open-driver-G06-signed-cuda-kmp-default-580.82.07_k5.14.21_150400.24.173-150400.98.1
  • nvidia-open-driver-G06-signed-cuda-debugsource-580.82.07-150400.98.1
  • nvidia-open-driver-G06-signed-kmp-default-debuginfo-580.82.07_k5.14.21_150400.24.173-150400.98.1
  • nvidia-open-driver-G06-signed-cuda-kmp-default-debuginfo-580.82.07_k5.14.21_150400.24.173-150400.98.1
  • nvidia-open-driver-G06-signed-debugsource-580.82.07-150400.98.1
  • nv-prefer-signed-open-driver-580.82.07-150400.98.1
  • nvidia-open-driver-G06-signed-kmp-default-580.82.07_k5.14.21_150400.24.173-150400.98.1
• SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 x86_64)
  • nvidia-open-driver-G06-signed-cuda-kmp-default-580.82.07_k5.14.21_150400.24.173-150400.98.1
  • nvidia-open-driver-G06-signed-cuda-debugsource-580.82.07-150400.98.1
  • nvidia-open-driver-G06-signed-kmp-default-debuginfo-580.82.07_k5.14.21_150400.24.173-150400.98.1
  • nvidia-open-driver-G06-signed-cuda-kmp-default-debuginfo-580.82.07_k5.14.21_150400.24.173-150400.98.1
  • nvidia-open-driver-G06-signed-debugsource-580.82.07-150400.98.1
  • nv-prefer-signed-open-driver-580.82.07-150400.98.1
  • nvidia-open-driver-G06-signed-kmp-default-580.82.07_k5.14.21_150400.24.173-150400.98.1
• SUSE Linux Enterprise Micro 5.4 (aarch64 x86_64)
  • nvidia-open-driver-G06-signed-cuda-kmp-default-580.82.07_k5.14.21_150400.24.173-150400.98.1
  • nvidia-open-driver-G06-signed-cuda-debugsource-580.82.07-150400.98.1
  • nvidia-open-driver-G06-signed-kmp-default-debuginfo-580.82.07_k5.14.21_150400.24.173-150400.98.1
  • nvidia-open-driver-G06-signed-cuda-kmp-default-debuginfo-580.82.07_k5.14.21_150400.24.173-150400.98.1
  • nvidia-open-driver-G06-signed-debugsource-580.82.07-150400.98.1
  • nv-prefer-signed-open-driver-580.82.07-150400.98.1
  • nvidia-open-driver-G06-signed-kmp-default-580.82.07_k5.14.21_150400.24.173-150400.98.1
• SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64)
  • nvidia-open-driver-G06-signed-cuda-kmp-default-580.82.07_k5.14.21_150400.24.173-150400.98.1
  • nvidia-open-driver-G06-signed-cuda-debugsource-580.82.07-150400.98.1
  • nvidia-open-driver-G06-signed-kmp-default-debuginfo-580.82.07_k5.14.21_150400.24.173-150400.98.1
  • nvidia-open-driver-G06-signed-cuda-kmp-default-debuginfo-580.82.07_k5.14.21_150400.24.173-150400.98.1
  • nvidia-open-driver-G06-signed-debugsource-580.82.07-150400.98.1
  • nvidia-open-driver-G06-signed-cuda-default-devel-580.82.07-150400.98.1
  • nv-prefer-signed-open-driver-580.82.07-150400.98.1
  • nvidia-open-driver-G06-signed-kmp-default-580.82.07_k5.14.21_150400.24.173-150400.98.1
  • nvidia-open-driver-G06-signed-default-devel-580.82.07-150400.98.1
• SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64)
  • nvidia-open-driver-G06-signed-64kb-devel-580.82.07-150400.98.1
  • nvidia-open-driver-G06-signed-cuda-64kb-devel-580.82.07-150400.98.1
  • nvidia-open-driver-G06-signed-cuda-kmp-64kb-580.82.07_k5.14.21_150400.24.173-150400.98.1
  • nvidia-open-driver-G06-signed-kmp-64kb-580.82.07_k5.14.21_150400.24.173-150400.98.1
  • nvidia-open-driver-G06-signed-cuda-kmp-64kb-debuginfo-580.82.07_k5.14.21_150400.24.173-150400.98.1
  • nvidia-open-driver-G06-signed-kmp-64kb-debuginfo-580.82.07_k5.14.21_150400.24.173-150400.98.1
• SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64)
  • nvidia-open-driver-G06-signed-cuda-kmp-default-580.82.07_k5.14.21_150400.24.173-150400.98.1
  • nvidia-open-driver-G06-signed-cuda-debugsource-580.82.07-150400.98.1
  • nvidia-open-driver-G06-signed-kmp-default-debuginfo-580.82.07_k5.14.21_150400.24.173-150400.98.1
  • nvidia-open-driver-G06-signed-cuda-kmp-default-debuginfo-580.82.07_k5.14.21_150400.24.173-150400.98.1
  • nvidia-open-driver-G06-signed-debugsource-580.82.07-150400.98.1
  • nvidia-open-driver-G06-signed-cuda-default-devel-580.82.07-150400.98.1
  • nv-prefer-signed-open-driver-580.82.07-150400.98.1
  • nvidia-open-driver-G06-signed-kmp-default-580.82.07_k5.14.21_150400.24.173-150400.98.1
  • nvidia-open-driver-G06-signed-default-devel-580.82.07-150400.98.1
• SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64)
  • nvidia-open-driver-G06-signed-64kb-devel-580.82.07-150400.98.1
  • nvidia-open-driver-G06-signed-cuda-64kb-devel-580.82.07-150400.98.1
  • nvidia-open-driver-G06-signed-cuda-kmp-64kb-580.82.07_k5.14.21_150400.24.173-150400.98.1
  • nvidia-open-driver-G06-signed-kmp-64kb-580.82.07_k5.14.21_150400.24.173-150400.98.1
  • nvidia-open-driver-G06-signed-cuda-kmp-64kb-debuginfo-580.82.07_k5.14.21_150400.24.173-150400.98.1
  • nvidia-open-driver-G06-signed-kmp-64kb-debuginfo-580.82.07_k5.14.21_150400.24.173-150400.98.1
• SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 x86_64)
  • nvidia-open-driver-G06-signed-cuda-kmp-default-580.82.07_k5.14.21_150400.24.173-150400.98.1
  • nvidia-open-driver-G06-signed-cuda-debugsource-580.82.07-150400.98.1
  • nvidia-open-driver-G06-signed-kmp-default-debuginfo-580.82.07_k5.14.21_150400.24.173-150400.98.1
  • nvidia-open-driver-G06-signed-cuda-kmp-default-debuginfo-580.82.07_k5.14.21_150400.24.173-150400.98.1
  • nvidia-open-driver-G06-signed-debugsource-580.82.07-150400.98.1
  • nvidia-open-driver-G06-signed-cuda-default-devel-580.82.07-150400.98.1
  • nv-prefer-signed-open-driver-580.82.07-150400.98.1
  • nvidia-open-driver-G06-signed-kmp-default-580.82.07_k5.14.21_150400.24.173-150400.98.1
  • nvidia-open-driver-G06-signed-default-devel-580.82.07-150400.98.1
• SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64)
  • nvidia-open-driver-G06-signed-64kb-devel-580.82.07-150400.98.1
  • nvidia-open-driver-G06-signed-cuda-64kb-devel-580.82.07-150400.98.1
  • nvidia-open-driver-G06-signed-cuda-kmp-64kb-580.82.07_k5.14.21_150400.24.173-150400.98.1
  • nvidia-open-driver-G06-signed-kmp-64kb-580.82.07_k5.14.21_150400.24.173-150400.98.1
  • nvidia-open-driver-G06-signed-cuda-kmp-64kb-debuginfo-580.82.07_k5.14.21_150400.24.173-150400.98.1
  • nvidia-open-driver-G06-signed-kmp-64kb-debuginfo-580.82.07_k5.14.21_150400.24.173-150400.98.1
• SUSE Linux Enterprise Server for SAP Applications 15 SP4 (x86_64)
  • nvidia-open-driver-G06-signed-debugsource-580.82.07-150400.98.1
  • nvidia-open-driver-G06-signed-kmp-default-debuginfo-580.82.07_k5.14.21_150400.24.173-150400.98.1
  • nvidia-open-driver-G06-signed-kmp-default-580.82.07_k5.14.21_150400.24.173-150400.98.1
  • nvidia-open-driver-G06-signed-default-devel-580.82.07-150400.98.1
• SUSE Manager Proxy 4.3 LTS (x86_64)
  • nvidia-open-driver-G06-signed-cuda-kmp-default-580.82.07_k5.14.21_150400.24.173-150400.98.1
  • nvidia-open-driver-G06-signed-cuda-debugsource-580.82.07-150400.98.1
  • nvidia-open-driver-G06-signed-kmp-default-debuginfo-580.82.07_k5.14.21_150400.24.173-150400.98.1
  • nvidia-open-driver-G06-signed-cuda-kmp-default-debuginfo-580.82.07_k5.14.21_150400.24.173-150400.98.1
  • nvidia-open-driver-G06-signed-debugsource-580.82.07-150400.98.1
  • nvidia-open-driver-G06-signed-cuda-default-devel-580.82.07-150400.98.1
  • nv-prefer-signed-open-driver-580.82.07-150400.98.1
  • nvidia-open-driver-G06-signed-kmp-default-580.82.07_k5.14.21_150400.24.173-150400.98.1
  • nvidia-open-driver-G06-signed-default-devel-580.82.07-150400.98.1
• SUSE Manager Retail Branch Server 4.3 LTS (x86_64)
  • nvidia-open-driver-G06-signed-cuda-kmp-default-580.82.07_k5.14.21_150400.24.173-150400.98.1
  • nvidia-open-driver-G06-signed-cuda-debugsource-580.82.07-150400.98.1
  • nvidia-open-driver-G06-signed-kmp-default-debuginfo-580.82.07_k5.14.21_150400.24.173-150400.98.1
  • nvidia-open-driver-G06-signed-cuda-kmp-default-debuginfo-580.82.07_k5.14.21_150400.24.173-150400.98.1
  • nvidia-open-driver-G06-signed-debugsource-580.82.07-150400.98.1
  • nvidia-open-driver-G06-signed-cuda-default-devel-580.82.07-150400.98.1
  • nv-prefer-signed-open-driver-580.82.07-150400.98.1
  • nvidia-open-driver-G06-signed-kmp-default-580.82.07_k5.14.21_150400.24.173-150400.98.1
  • nvidia-open-driver-G06-signed-default-devel-580.82.07-150400.98.1
• SUSE Manager Server 4.3 LTS (x86_64)
  • nvidia-open-driver-G06-signed-cuda-kmp-default-580.82.07_k5.14.21_150400.24.173-150400.98.1
  • nvidia-open-driver-G06-signed-cuda-debugsource-580.82.07-150400.98.1
  • nvidia-open-driver-G06-signed-kmp-default-debuginfo-580.82.07_k5.14.21_150400.24.173-150400.98.1
  • nvidia-open-driver-G06-signed-cuda-kmp-default-debuginfo-580.82.07_k5.14.21_150400.24.173-150400.98.1
  • nvidia-open-driver-G06-signed-debugsource-580.82.07-150400.98.1
  • nvidia-open-driver-G06-signed-cuda-default-devel-580.82.07-150400.98.1
  • nv-prefer-signed-open-driver-580.82.07-150400.98.1
  • nvidia-open-driver-G06-signed-kmp-default-580.82.07_k5.14.21_150400.24.173-150400.98.1
  • nvidia-open-driver-G06-signed-default-devel-580.82.07-150400.98.1

References:

• https://www.suse.com/security/cve/CVE-2025-23277.html
• https://www.suse.com/security/cve/CVE-2025-23278.html
• https://www.suse.com/security/cve/CVE-2025-23279.html
• https://www.suse.com/security/cve/CVE-2025-23283.html
• https://www.suse.com/security/cve/CVE-2025-23286.html
• https://bugzilla.suse.com/show_bug.cgi?id=1236658
• https://bugzilla.suse.com/show_bug.cgi?id=1236746
• https://bugzilla.suse.com/show_bug.cgi?id=1237208
• https://bugzilla.suse.com/show_bug.cgi?id=1237308
• https://bugzilla.suse.com/show_bug.cgi?id=1237585
• https://bugzilla.suse.com/show_bug.cgi?id=1239139
• https://bugzilla.suse.com/show_bug.cgi?id=1239653
• https://bugzilla.suse.com/show_bug.cgi?id=1241231
• https://bugzilla.suse.com/show_bug.cgi?id=1242054
• https://bugzilla.suse.com/show_bug.cgi?id=1243192
• https://bugzilla.suse.com/show_bug.cgi?id=1244614
• https://bugzilla.suse.com/show_bug.cgi?id=1246010
• https://bugzilla.suse.com/show_bug.cgi?id=1246327
• https://bugzilla.suse.com/show_bug.cgi?id=1247528
• https://bugzilla.suse.com/show_bug.cgi?id=1247529
• https://bugzilla.suse.com/show_bug.cgi?id=1247530
• https://bugzilla.suse.com/show_bug.cgi?id=1247531
• https://bugzilla.suse.com/show_bug.cgi?id=1247532
• https://bugzilla.suse.com/show_bug.cgi?id=1247907
• https://bugzilla.suse.com/show_bug.cgi?id=1247923
• https://bugzilla.suse.com/show_bug.cgi?id=1249235
• https://jira.suse.com/browse/PED-13295