CVE-2026-65115

Resource Exhaustion Leading to Denial of Service in NVIDIA Infrastructure Controller for Linux

Published Sep 22, 2026 CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed

Description

NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker may cause uncontrolled resource consumption. A successful exploit of this vulnerability may lead to denial of service.

Analysis

Technical impact

The vulnerability in NVIDIA Infrastructure Controller for Linux permits an attacker to trigger uncontrolled resource consumption, which can lead to a denial of service. This weakness is classified as CWE-400, indicating excessive resource consumption without proper limits.

Affected Systems

The affected product is NVIDIA Infrastructure Controller for Linux. No specific versions are listed in the advisory, so any installation of this controller is potentially vulnerable until a patch is applied.

Risk and Exploitability

The CVSS score of 6.5 indicates a moderate severity. EPSS data is not available, and the vulnerability is not currently listed in CISA KEV. The attack vector is not explicitly defined in the description; it is inferred that an attacker requires some level of interaction with the controller to exploit the uncontrolled resource usage. Successful exploitation would result in service downtime but does not provide direct elevation of privileges or data breach.

Affected Products

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

NVIDIA

Infrastructure Controller

unaffected

Version	Status	Constraints
`0 to 1.9`	affected	—

Configuration 1 [-]

AND

cpe:2.3:a:nvidia:infra_controller:*:*:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*

No data.

Vendor Product Versions

Nvidia

Infrastructure Controller

Version	Status	Scheme	Platform
`[0,1.9]`	affected	generic	['linux']

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

Apply the latest firmware or software patch released for NVIDIA Infrastructure Controller as it will address the uncontrolled resource consumption flaw.
Restrict physical or network access to the infrastructure controller so that only trusted hosts or networks can communicate with it.
Continuously monitor CPU, memory, and disk usage on the controller, and alert for sudden spikes that could indicate exploitation attempts.

Generated by OpenCVE AI on September 22, 2026 at 15:52 UTC.

Tracking

Advisories

No advisories available

Metrics

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploit prediction score: < 1% (0.585% probability within 30 days)

Exploitation none

Automatable no

Technical Impact partial

References

Link	Providers
https://github.com/NVIDIA/product-security/tree/main/2026/5879
https://nvd.nist.gov/vuln/detail/CVE-2026-65115
https://www.cve.org/CVERecord?id=CVE-2026-65115

History

Sep 29, 2026 6:45 PM First appearance in the feed. Affected versions updated. Affected vendors updated View changes

Type	Values Removed	Values Added
First Time appeared		Linux Linux linux Kernel Nvidia infra Controller
CPEs		cpe:2.3:a:nvidia:infra_controller:::::::: cpe:2.3:o:linux:linux_kernel:-:::::::*
Vendors & Products		Linux Linux linux Kernel Nvidia infra Controller

Sep 23, 2026 3:30 PM Scoring metrics updated View changes

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Sep 22, 2026 7:45 PM First appearance in the feed. Affected vendors updated View changes

Type	Values Removed	Values Added
First Time appeared		Nvidia Nvidia infrastructure Controller
Vendors & Products		Nvidia Nvidia infrastructure Controller

Sep 22, 2026 4:15 PM Title updated View changes

Type	Values Removed	Values Added
Title		Resource Exhaustion Leading to Denial of Service in NVIDIA Infrastructure Controller for Linux

Sep 22, 2026 2:30 PM Description updated. Weaknesses updated. Added references. Scoring metrics updated View changes

Type	Values Removed	Values Added
Description		NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker may cause uncontrolled resource consumption. A successful exploit of this vulnerability may lead to denial of service.
Weaknesses		CWE-400
References		https://github.com/NVIDIA/product-security/tree/main/2026/5879 https://nvd.nist.gov/vuln/detail/CVE-2026-65115 https://www.cve.org/CVERecord?id=CVE-2026-65115
Metrics		cvssV3_1 `{'score': 6.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}`