NVIDIA ConnectX-4 LX

• CVE-2025-23351 Critical 9.0 NVIDIA ConnectX and BlueField contain a vulnerability in the command interface where a local user with virtual function (VF) access may cause a write out of bounds by crafted input. A successful explo 0.4%
• CVE-2025-23299 Medium 6.7 NVIDIA Bluefield and ConnectX contain a vulnerability in the management interface that could allow a malicious actor with high privilege access to execute arbitrary code. 0.2%
• CVE-2025-23262 Medium 6.3 NVIDIA ConnectX contains a vulnerability in the management interface, where an attacker with local access could cause incorrect authorization to modify the configuration. A successful exploit of this 0.2%