Technical impact
The vulnerability allows an attacker to cause uncontrolled consumption of system resources such as memory or CPU, leading the NVIDIA Infrastructure Controller for Linux to become unresponsive. This represents a classic example of a CWE‑400 flaw where resource limits are not enforced, giving the attacker a path to disrupt legitimate operation.
Affected Systems
NVIDIA Infrastructure Controller for Linux is affected. The advisory does not specify exact version numbers, so any installation of the current releases should be considered vulnerable until a vendor patch is applied.
Risk and Exploitability
With a CVSS score of 6.5 the flaw is moderate in severity. EPSS data is unavailable, so the likelihood of exploitation in the wild is uncertain. It is not listed in the CISA KEV catalog. The attack likely requires at least local or network access to the controller; the precise attack vector is not detailed, but the impact is a denial of service to legitimate users.
