CVE-2025-33235 Race condition in Resiliency Extension
An attacker can exploit a race condition in NVIDIA Resiliency Extension to disclose information, tamper with data, cause denial of service, or escalate privileges.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-33235?
CVE-2025-33235 is a high-severity vulnerability in NVIDIA Resiliency Extension, published on 16 Dec 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
NVIDIA Resiliency Extension for Linux contains a vulnerability in the checkpointing core, where an attacker may cause a race condition. A successful exploit of this vulnerability might lead to information disclosure, data tampering, denial of service, or escalation of privileges.
Weakness: CWE-362
Which versions are affected by CVE-2025-33235?
It affects 1 product.
Products include Nvidia Nvidia Resiliency Extension.
How do I fix CVE-2025-33235?
No fix has been published for CVE-2025-33235 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-33235 being exploited?
There is no known exploitation of CVE-2025-33235 in the wild and no public exploit code.
Other vulnerabilities in NVIDIA Resiliency Extension
Sources
Also known as GHSA-r5vr-695c-56f3.