CVE-2025-33235CWE-362

NVIDIA Resiliency Extension for Linux contains a vulnerability in the checkpointing core, where an attacker may cause a race condition

High · published December 16, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
2.1
In the wild
Unconfirmed
What it is

⚡ A race condition lurking in the NVIDIA Resiliency Extension for Linux could cause chaos before your eyes! 🎢 Think of it as a clumsy waiter trying to serve two tables at once, mixing up orders and dropping drinks – one small misstep and everything spirals out of control! If an attacker exploits this vulnerability, they could potentially disclose sensitive information, tamper with data, cause service outages, or even escalate their privileges to gain unfettered access. The consequences could be absolutely devastating for your systems!

Put simply

Think of it as a clumsy waiter trying to serve two tables at once, mixing up orders and dropping drinks – one small misstep and everything spirals out of control! This vulnerability arises from a race condition in the checkpointing core of the NVIDIA Resiliency Extension, allowing attackers to manipulate timing and access controls to achieve unintended outcomes.

What to do

If an attacker exploits this vulnerability, they could potentially disclose sensitive information, tamper with data, cause service outages, or even escalate their privileges to gain unfettered access. The consequences could be absolutely devastating for your systems! To remediate this issue, ensure you're running the latest version of the NVIDIA Resiliency Extension. Implement strict input validation and monitor access controls closely to safeguard against potential exploitation. Don't wait too long to assess and patch your systems! You've got this! With a little diligence and the right steps, your systems will be fortified in no time. 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00127 · 2.1th percentile
Weakness
CWE-362 · Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Published
2025-12-16T17:38Z
EPSS history
Timeline
  • 16 DEC 17:38Z
    NVIDIA Resiliency Extension for Linux contains a vulnerability in the checkpointing core, where an attacker may cause a race condition
    cvelistv5