CVE-2026-65127

A vulnerability in NVIDIA Infrastructure Controller for Linux allows an attacker to cause exposure of sensitive system information due to uncleared debug information. The flaw is triggered when debug information is not properly cleared after use, potentially being accessed through local system interfaces. A successful exploit could lead to information disclosure, though the CVSS vector indicates high attack complexity and requires high privileges. No public proof-of-concept or active exploitation is currently known. The vulnerability is part of a larger set of 14 flaws affecting the same product.

What to do: Update NVIDIA Infrastructure Controller for Linux to the latest patched version provided by NVIDIA. Review system logs and audit access to debug-related interfaces to ensure no unauthorized access occurred.