CVE-2025-33225CWE-61

NVIDIA Resiliency Extension for Linux contains a vulnerability in log aggregation, where an attacker could cause predictable log-file names

High · published December 16, 2025

CVSS v3.1
8.4
EPSS
0%
Percentile
21.8
In the wild
Unconfirmed
What it is

⚡ An attacker can predict log-file names in NVIDIA's Resiliency Extension for Linux, and that’s a recipe for chaos! 📉 Think of log files as restaurant orders left in plain view on the kitchen counter. If a savvy diner knows how to read those orders, they could figure out what goes into the dish — and sneakily make substitutions without anyone noticing! This vulnerability could lead to privilege escalation, unauthorized code execution, or even denial of service! It’s like giving a mischievous patron the ability to change the menu at will, potentially tampering with critical data and making the establishment unusable. Absolute mayhem!

Put simply

Think of log files as restaurant orders left in plain view on the kitchen counter. If a savvy diner knows how to read those orders, they could figure out what goes into the dish — and sneakily make substitutions without anyone noticing! The vulnerability in the log aggregation system allows attackers to create predictable log-file names, which can be exploited to perform unauthorized actions in the system and compromise its integrity.

What to do

This vulnerability could lead to privilege escalation, unauthorized code execution, or even denial of service! It’s like giving a mischievous patron the ability to change the menu at will, potentially tampering with critical data and making the establishment unusable. Absolute mayhem! To mitigate this, ensure you update NVIDIA Resiliency Extension for Linux to the latest version, fortify your logging mechanisms, and restrict access to log files. This will help keep sneaky intruders at bay! You can tackle this challenge! Keep your systems secure and stay vigilant. You've got this! 🛡️

The record
Technical detail
CVSS v3.1
8.4 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00303 · 21.8th percentile
Weakness
CWE-61 · UNIX Symbolic Link (Symlink) Following
Published
2025-12-16T17:37Z
EPSS history
Timeline
  • 16 DEC 17:37Z
    NVIDIA Resiliency Extension for Linux contains a vulnerability in log aggregation, where an attacker could cause predictable log-file names
    cvelistv5