A critical vulnerability affecting its BlueField Data Processing Units (DPUs) and ConnectX networking ecosystem, warning that malicious virtual machine (VM) users could execute code via specially crafted network messages.
The flaw, tracked as CVE-2026-65094, carries a CVSS score of 9.0 and impacts the VIRTIO-Net implementation used across multiple BlueField deployments.
The vulnerability exists within the Virtio-Net component, where improper handling of input messages allows a Write-What-Where condition (CWE-123).
Critical NVIDIA BlueField Flaw
This memory corruption issue can be triggered by a low-privilege VM user without requiring user interaction, significantly increasing the potential for exploitation in multi-tenant or cloud environments.
The vulnerability arises due to insufficient validation of crafted Virtio-Net messages processed by the BlueField DPU. An attacker operating within a guest VM can manipulate message structures to overwrite arbitrary memory locations within the Virtio-Net context.
The flaw is particularly dangerous because it requires only low privileges within a VM, does not require user interaction, impacts confidentiality, integrity, and availability, and allows scope change that may affect host-level components.
Successful exploitation may enable attackers to execute arbitrary code within the Virtio-Net scope, which could be leveraged for lateral movement, privilege escalation, or disruption of network services.
Affected Products and Versions
The vulnerability affects NVIDIA VIRTIO-Net across multiple release tracks on BlueField 3 platforms. VIRTIO-Net GA is impacted in all versions prior to 25.10.6.
VIRTIO-Net LTS25 is affected in versions before 25.10.2. VIRTIO-Net LTS24 includes affected versions up to and including 24.10.50. VIRTIO-Net LTS23 is vulnerable in version 1.7.21 and earlier.
NVIDIA has released patched versions that address the flaw, and users are strongly advised to upgrade to the latest available releases immediately.
This vulnerability is particularly relevant to cloud service providers, data centers, and enterprises that leverage NVIDIA BlueField DPUs for workload isolation and network acceleration. In such environments, attackers with access to a guest VM could exploit the flaw to break isolation boundaries.
Mitigation
NVIDIA recommends immediate remediation through software updates available via its DOCA distribution portal.
Organizations should upgrade to patched Virtio-Net versions, including 25.10.6, 25.10.2, 24.10.50, or 23.10.23 and newer; audit VM isolation controls and network traffic handling; monitor for anomalous Virtio-Net traffic patterns; and apply defense-in-depth controls such as segmentation and runtime monitoring.
The issue was discovered internally by NVIDIA and replaces a previously assigned CVE (CVE-2025-33209), underscoring ongoing refinements in vulnerability tracking.
Security teams are encouraged to review their exposure, especially in environments where BlueField DPUs are used for offloading networking and security functions, as exploitation could undermine trust boundaries within virtualized infrastructure.
Cut SOC investigation blind spots and contain threats earlier to reduce response costs and business disruption with ANY.RUN.
 and ConnectX networking ecosystem, warning that malicious virtual machine (VM) users could execute code via specially crafted network messages.){kind=link}