Uncontrolled Resource Consumption DoS in NVIDIA Infrastructure Controller for Linux
CVE-2026-65115 is a denial-of-service vulnerability in the NVIDIA Infrastructure Controller for Linux, allowing an attacker to cause uncontrolled resource consumption. The flaw is triggered by sending specific requests to the vulnerable service, requiring low-privilege access (PR:L). A successful exploit would lead to a denial of service, disrupting the management and operation of NVIDIA-based infrastructure. This affects organizations deploying NVIDIA Linux-based infrastructure management solutions. No public proof-of-concept or in-the-wild exploitation is currently known.
What to do: Update the NVIDIA Infrastructure Controller for Linux to the latest version available from NVIDIA's official support channels. If immediate patching is not possible, restrict network access to the affected component to limit exposure to trusted users only.
| Product | Affected |
|---|---|
| NVIDIA Infrastructure Controller for Linux | all versions prior to the patch |
Order-of-magnitude estimate by the model from install counts, market share and public scan data it knows; verify before quoting.
NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker may cause uncontrolled resource consumption. A successful exploit of this vulnerability may lead to denial of service.
NVIDIA patches 14 vulnerabilities in its Infrastructure Controller, including a critical CVSS 9.8 hard-coded credentials flaw enabling unauthenticated remote privilege escalation.
NVIDIA patches 14 flaws in Linux Infrastructure Controller, including a critical CVSS 9.8 hardcoded credential issue.
Today 1.6K readers · 2.5K views · 781 reads · all time 189K views