CVE-2023-25529

CVE-2023-25529 is a timing-based information disclosure vulnerability affecting the host KVM daemon in NVIDIA DGX H100 and DGX A100 BMC. An unauthenticated attacker can exploit timing discrepancies in server responses to leak another user's session token. This vulnerability carries a CVSS score of 8.1 (HIGH), indicating a high potential for information disclosure, privilege escalation, and data tampering, though it requires high attack complexity. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.