CVE-2026-65115

CVE-2026-65115 is a denial-of-service vulnerability in the NVIDIA Infrastructure Controller for Linux, allowing an attacker to cause uncontrolled resource consumption. The flaw is triggered by sending specific requests to the vulnerable service, requiring low-privilege access (PR:L). A successful exploit would lead to a denial of service, disrupting the management and operation of NVIDIA-based infrastructure. This affects organizations deploying NVIDIA Linux-based infrastructure management solutions. No public proof-of-concept or in-the-wild exploitation is currently known.

What to do: Update the NVIDIA Infrastructure Controller for Linux to the latest version available from NVIDIA's official support channels. If immediate patching is not possible, restrict network access to the affected component to limit exposure to trusted users only.