documented vGPU Manager cross-VM metric leakage (CVE-2025-23290, CVSS 2.5) and cross-tenant denial of service (CVE-2025-23285): the isolation-breach playbook's design case
CVE-2025-23290 / -23285observed
| Value kind | observed — Reported measurements, counts, and specifications keep the precision and scope stated by their source; an exact specification is not treated as a range. |
|---|---|
| Scope | Low-severity information disclosure and a denial of service; neither is a VM escape. The same bulletin fixed CVE-2025-23283 and CVE-2025-23284, guest-to-host code-execution flaws in the vGPU Manager (CVSS 7.8). |
| As of | 2025-07 |
| Source | NVIDIA security bulletin 5670 (vGPU, July 2025); NVD CVE-2025-23290 / CVE-2025-23285 |
| Review | checking…review by 2027-07-31 · standard cadence |
| Recorded changes | last 2026-10-16 · 3 revisions tracked |
| Claim id | documented-multi-tenant-gpu-escape-cross-vm |
Where the guide uses it
← Full numbers register — every date-stamped figure in the guide, with revision history.