Vulnerability · Published Jan 28, 2026 · Assigned by nvidia
CVE-2025-33220
High 7.8
In plain English
A high-severity use-after-free in GeForce from NVIDIA. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 10% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Official description
NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a malicious guest could cause heap memory access after the memory is freed. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, or information disclosure.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu:22.04:LTS | nvidia-graphics-drivers-390 | no fix listed | UBUNTU-CVE-2025-33220 |
| Ubuntu:22.04:LTS | nvidia-graphics-drivers-418-server | no fix listed | UBUNTU-CVE-2025-33220 |
| Ubuntu:22.04:LTS | nvidia-graphics-drivers-430 | no fix listed | UBUNTU-CVE-2025-33220 |
| Ubuntu:22.04:LTS | nvidia-graphics-drivers-440 | no fix listed | UBUNTU-CVE-2025-33220 |
| Ubuntu:22.04:LTS | nvidia-graphics-drivers-450 | no fix listed | UBUNTU-CVE-2025-33220 |
| Ubuntu:22.04:LTS | nvidia-graphics-drivers-450-server | no fix listed | UBUNTU-CVE-2025-33220 |
| Ubuntu:22.04:LTS | nvidia-graphics-drivers-455 | no fix listed | UBUNTU-CVE-2025-33220 |
| Ubuntu:22.04:LTS | nvidia-graphics-drivers-460 | no fix listed | UBUNTU-CVE-2025-33220 |
| Ubuntu:22.04:LTS | nvidia-graphics-drivers-470 | no fix listed | UBUNTU-CVE-2025-33220 |
| Ubuntu:24.04:LTS | nvidia-graphics-drivers-470 | no fix listed | UBUNTU-CVE-2025-33220 |
| Ubuntu:22.04:LTS | nvidia-graphics-drivers-470-server | no fix listed | UBUNTU-CVE-2025-33220 |
| Ubuntu:24.04:LTS | nvidia-graphics-drivers-470-server | no fix listed | UBUNTU-CVE-2025-33220 |
| Ubuntu:22.04:LTS | nvidia-graphics-drivers-510 | no fix listed | UBUNTU-CVE-2025-33220 |
| Ubuntu:22.04:LTS | nvidia-graphics-drivers-515 | no fix listed | UBUNTU-CVE-2025-33220 |
| Ubuntu:22.04:LTS | nvidia-graphics-drivers-515-server | no fix listed | UBUNTU-CVE-2025-33220 |
| Ubuntu:22.04:LTS | nvidia-graphics-drivers-520 | no fix listed | UBUNTU-CVE-2025-33220 |
| Ubuntu:22.04:LTS | nvidia-graphics-drivers-530 | no fix listed | UBUNTU-CVE-2025-33220 |
| Ubuntu:22.04:LTS | nvidia-graphics-drivers-535 | 535.288.01-0ubuntu0.22.04.1 | UBUNTU-CVE-2025-33220 |
| Ubuntu:24.04:LTS | nvidia-graphics-drivers-535 | 535.288.01-0ubuntu0.24.04.1 | UBUNTU-CVE-2025-33220 |
| Ubuntu:22.04:LTS | nvidia-graphics-drivers-535-server | 535.288.01-0ubuntu0.22.04.1 | UBUNTU-CVE-2025-33220 |
| Ubuntu:24.04:LTS | nvidia-graphics-drivers-535-server | 535.288.01-0ubuntu0.24.04.2 | UBUNTU-CVE-2025-33220 |
| Ubuntu:25.10 | nvidia-graphics-drivers-535-server | no fix listed | UBUNTU-CVE-2025-33220 |
| Ubuntu:26.04:LTS | nvidia-graphics-drivers-535-server | no fix listed | UBUNTU-CVE-2025-33220 |
| Ubuntu:22.04:LTS | nvidia-graphics-drivers-545 | no fix listed | UBUNTU-CVE-2025-33220 |
| Ubuntu:22.04:LTS | nvidia-graphics-drivers-550 | no fix listed | UBUNTU-CVE-2025-33220 |
| Ubuntu:24.04:LTS | nvidia-graphics-drivers-550 | no fix listed | UBUNTU-CVE-2025-33220 |
| Ubuntu:25.10 | nvidia-graphics-drivers-550 | no fix listed | UBUNTU-CVE-2025-33220 |
| Ubuntu:26.04:LTS | nvidia-graphics-drivers-550 | no fix listed | UBUNTU-CVE-2025-33220 |
| Ubuntu:22.04:LTS | nvidia-graphics-drivers-550-server | no fix listed | UBUNTU-CVE-2025-33220 |
| Ubuntu:24.04:LTS | nvidia-graphics-drivers-550-server | no fix listed | UBUNTU-CVE-2025-33220 |
| Ubuntu:25.10 | nvidia-graphics-drivers-550-server | no fix listed | UBUNTU-CVE-2025-33220 |
| Ubuntu:26.04:LTS | nvidia-graphics-drivers-550-server | no fix listed | UBUNTU-CVE-2025-33220 |
| Ubuntu:25.10 | nvidia-graphics-drivers-560 | no fix listed | UBUNTU-CVE-2025-33220 |
| Ubuntu:26.04:LTS | nvidia-graphics-drivers-560 | no fix listed | UBUNTU-CVE-2025-33220 |
| Ubuntu:22.04:LTS | nvidia-graphics-drivers-565-server | no fix listed | UBUNTU-CVE-2025-33220 |
| Ubuntu:24.04:LTS | nvidia-graphics-drivers-565-server | no fix listed | UBUNTU-CVE-2025-33220 |
| Ubuntu:22.04:LTS | nvidia-graphics-drivers-570 | 570.211.01-0ubuntu0.22.04.1 | UBUNTU-CVE-2025-33220 |
| Ubuntu:24.04:LTS | nvidia-graphics-drivers-570 | 570.211.01-0ubuntu0.24.04.1 | UBUNTU-CVE-2025-33220 |
| Ubuntu:25.10 | nvidia-graphics-drivers-570 | no fix listed | UBUNTU-CVE-2025-33220 |
| Ubuntu:26.04:LTS | nvidia-graphics-drivers-570 | no fix listed | UBUNTU-CVE-2025-33220 |
| Ubuntu:26.10 | nvidia-graphics-drivers-570 | no fix listed | UBUNTU-CVE-2025-33220 |
| Ubuntu:22.04:LTS | nvidia-graphics-drivers-570-server | 570.211.01-0ubuntu0.22.04.1 | UBUNTU-CVE-2025-33220 |
| Ubuntu:24.04:LTS | nvidia-graphics-drivers-570-server | 570.211.01-0ubuntu0.24.04.1 | UBUNTU-CVE-2025-33220 |
| Ubuntu:25.10 | nvidia-graphics-drivers-570-server | no fix listed | UBUNTU-CVE-2025-33220 |
| Ubuntu:26.04:LTS | nvidia-graphics-drivers-570-server | no fix listed | UBUNTU-CVE-2025-33220 |
| Ubuntu:26.10 | nvidia-graphics-drivers-570-server | no fix listed | UBUNTU-CVE-2025-33220 |
| Ubuntu:22.04:LTS | nvidia-graphics-drivers-575 | no fix listed | UBUNTU-CVE-2025-33220 |
| Ubuntu:24.04:LTS | nvidia-graphics-drivers-575 | no fix listed | UBUNTU-CVE-2025-33220 |
| Ubuntu:25.10 | nvidia-graphics-drivers-575 | no fix listed | UBUNTU-CVE-2025-33220 |
| Ubuntu:26.04:LTS | nvidia-graphics-drivers-575 | no fix listed | UBUNTU-CVE-2025-33220 |
| Ubuntu:22.04:LTS | nvidia-graphics-drivers-575-server | no fix listed | UBUNTU-CVE-2025-33220 |
| Ubuntu:24.04:LTS | nvidia-graphics-drivers-575-server | no fix listed | UBUNTU-CVE-2025-33220 |
| Ubuntu:22.04:LTS | nvidia-graphics-drivers-580 | 580.126.09-0ubuntu0.22.04.1 | UBUNTU-CVE-2025-33220 |
| Ubuntu:24.04:LTS | nvidia-graphics-drivers-580 | 580.126.09-0ubuntu0.24.04.1 | UBUNTU-CVE-2025-33220 |
| Ubuntu:25.10 | nvidia-graphics-drivers-580 | 580.126.09-0ubuntu0.25.10.1 | UBUNTU-CVE-2025-33220 |
| Ubuntu:22.04:LTS | nvidia-graphics-drivers-580-server | 580.126.09-0ubuntu0.22.04.1 | UBUNTU-CVE-2025-33220 |
| Ubuntu:24.04:LTS | nvidia-graphics-drivers-580-server | 580.126.09-0ubuntu0.24.04.1 | UBUNTU-CVE-2025-33220 |
| Ubuntu:25.10 | nvidia-graphics-drivers-580-server | 580.126.09-0ubuntu0.25.10.1 | UBUNTU-CVE-2025-33220 |
| Ubuntu:22.04:LTS | nvidia-graphics-drivers-590 | 590.48.01-0ubuntu0.22.04.1 | UBUNTU-CVE-2025-33220 |
| Ubuntu:24.04:LTS | nvidia-graphics-drivers-590 | 590.48.01-0ubuntu0.24.04.1 | UBUNTU-CVE-2025-33220 |
| Ubuntu:25.10 | nvidia-graphics-drivers-590 | 590.48.01-0ubuntu0.25.10.1 | UBUNTU-CVE-2025-33220 |
| Ubuntu:22.04:LTS | nvidia-graphics-drivers-590-server | 590.48.01-0ubuntu0.22.04.1 | UBUNTU-CVE-2025-33220 |
| Ubuntu:24.04:LTS | nvidia-graphics-drivers-590-server | 590.48.01-0ubuntu0.24.04.1 | UBUNTU-CVE-2025-33220 |
| Ubuntu:25.10 | nvidia-graphics-drivers-590-server | 590.48.01-0ubuntu0.25.10.1 | UBUNTU-CVE-2025-33220 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| NVIDIA | GeForce | All driver versions prior to 590.48.01 |
| NVIDIA | GeForce | All driver versions prior to 580.126.09 |
| NVIDIA | GeForce | All driver versions prior to 570.211.01 |
| NVIDIA | GeForce | All driver versions prior to 535.288.01 |
| NVIDIA | RTX PRO, RTX, Quadro | All driver versions prior to 590.48.01 |
| NVIDIA | RTX PRO, RTX, Quadro | All driver versions prior to 580.126.09 |
| NVIDIA | RTX PRO, RTX, Quadro | All driver versions prior to 570.211.01 |
| NVIDIA | RTX PRO, RTX, Quadro | All driver versions prior to 535.288.01 |
| NVIDIA | Tesla | All driver versions prior to 590.48.01 |
| NVIDIA | Tesla | All driver versions prior to 580.126.09 |
| NVIDIA | Tesla | All driver versions prior to 570.211.01 |
| NVIDIA | Tesla | All driver versions prior to 535.288.01 |
| NVIDIA | Virtual GPU Manager | 580.105.06(All versions prior to and including vGPU software 19.3) |
| NVIDIA | Virtual GPU Manager | 570.195.02(All versions prior to and including vGPU software 18.5) |
| NVIDIA | Virtual GPU Manager | 535.274.03(All versions prior to and including vGPU software 16.13) |
Weakness: CWE-416 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H