Information Disclosure via Uncleared Debug Info in NVIDIA Controller for Linux
A vulnerability in NVIDIA Infrastructure Controller for Linux allows an attacker to cause exposure of sensitive system information due to uncleared debug information. The flaw is triggered when debug information is not properly cleared after use, potentially being accessed through local system interfaces. A successful exploit could lead to information disclosure, though the CVSS vector indicates high attack complexity and requires high privileges. No public proof-of-concept or active exploitation is currently known. The vulnerability is part of a larger set of 14 flaws affecting the same product.
What to do: Update NVIDIA Infrastructure Controller for Linux to the latest patched version provided by NVIDIA. Review system logs and audit access to debug-related interfaces to ensure no unauthorized access occurred.
| Product | Affected |
|---|---|
| NVIDIA Infrastructure Controller for Linux | — |
Order-of-magnitude estimate by the model from install counts, market share and public scan data it knows; verify before quoting.
NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause exposure of sensitive system information due to uncleared debug information. A successful exploit of this vulnerability might lead to information disclosure.
NVIDIA patches 14 vulnerabilities in its Infrastructure Controller, including a critical CVSS 9.8 hard-coded credentials flaw enabling unauthenticated remote privilege escalation.
NVIDIA patches 14 flaws in Linux Infrastructure Controller, including a critical CVSS 9.8 hardcoded credential issue.
Today 1.6K readers · 2.5K views · 781 reads · all time 189K views