Improper Certificate Validation in NVIDIA Infrastructure Controller for Linux
CVE-2026-65118 is a high-severity vulnerability in NVIDIA Infrastructure Controller for Linux due to improper certificate validation. An attacker on the adjacent network can exploit this flaw without authentication to potentially cause information disclosure, data tampering, and denial of service. The vulnerability is triggered by mishandling of cryptographic certificates, allowing a man-in-the-middle position. No public proof-of-concept exploit is currently known, and the specific affected version ranges have not been publicly detailed.
What to do: Check your NVIDIA driver version via 'nvidia-smi'. Upgrade to the latest NVIDIA driver for your GPU from NVIDIA's official website. If immediate patching is not possible, ensure the affected controller service is not exposed to untrusted networks.
| Product | Affected |
|---|---|
| NVIDIA Infrastructure Controller for Linux | — |
Order-of-magnitude estimate by the model from install counts, market share and public scan data it knows; verify before quoting.
NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause improper certificate validation. A successful exploit of this vulnerability might lead to information disclosure, data tampering, and denial of service.
NVIDIA patches 14 vulnerabilities in its Infrastructure Controller, including a critical CVSS 9.8 hard-coded credentials flaw enabling unauthenticated remote privilege escalation.
NVIDIA patches 14 flaws in Linux Infrastructure Controller, including a critical CVSS 9.8 hardcoded credential issue.
Today 1.6K readers · 2.5K views · 781 reads · all time 189K views