Description
NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker may cause uncontrolled resource consumption. A successful exploit of this vulnerability may lead to denial of service.
Published: 2026-09-22
Score: 6.5 Medium
EPSS: < 1% Very Low
KEV: No
Impact: Denial of Service (resource exhaustion)
Action: Patch Now
AI Analysis

Impact

The vulnerability in NVIDIA Infrastructure Controller for Linux permits an attacker to trigger uncontrolled resource consumption, which can lead to a denial of service. This weakness is classified as CWE-400, indicating excessive resource consumption without proper limits.

Affected Systems

The affected product is NVIDIA Infrastructure Controller for Linux. No specific versions are listed in the advisory, so any installation of this controller is potentially vulnerable until a patch is applied.

Risk and Exploitability

The CVSS score of 6.5 indicates a moderate severity. EPSS data is not available, and the vulnerability is not currently listed in CISA KEV. The attack vector is not explicitly defined in the description; it is inferred that an attacker requires some level of interaction with the controller to exploit the uncontrolled resource usage. Successful exploitation would result in service downtime but does not provide direct elevation of privileges or data breach.

Generated by OpenCVE AI on September 22, 2026 at 15:52 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Apply the latest firmware or software patch released for NVIDIA Infrastructure Controller as it will address the uncontrolled resource consumption flaw.
  • Restrict physical or network access to the infrastructure controller so that only trusted hosts or networks can communicate with it.
  • Continuously monitor CPU, memory, and disk usage on the controller, and alert for sudden spikes that could indicate exploitation attempts.

Generated by OpenCVE AI on September 22, 2026 at 15:52 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 29 Sep 2026 18:45:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
Nvidia infra Controller
CPEs cpe:2.3:a:nvidia:infra_controller:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
Nvidia infra Controller

Wed, 23 Sep 2026 15:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Tue, 22 Sep 2026 19:45:00 +0000

Type Values Removed Values Added
First Time appeared Nvidia
Nvidia infrastructure Controller
Vendors & Products Nvidia
Nvidia infrastructure Controller

Tue, 22 Sep 2026 16:15:00 +0000

Type Values Removed Values Added
Title Resource Exhaustion Leading to Denial of Service in NVIDIA Infrastructure Controller for Linux

Tue, 22 Sep 2026 14:30:00 +0000

Type Values Removed Values Added
Description NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker may cause uncontrolled resource consumption. A successful exploit of this vulnerability may lead to denial of service.
Weaknesses CWE-400
References
Metrics cvssV3_1

{'score': 6.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

Subscriptions

Linux Linux Kernel
Nvidia Infra Controller Infrastructure Controller
cve-icon MITRE

Status: PUBLISHED

Assigner: nvidia

Published:

Updated: 2026-09-22T15:07:31.649Z

Reserved: 2026-07-21T17:12:30.491Z

Link: CVE-2026-65115

cve-icon Vulnrichment

Updated: 2026-09-22T14:59:36.687Z

cve-icon NVD

Status : Analyzed

Published: 2026-09-22T15:17:11.777

Modified: 2026-09-29T18:35:29.223

Link: CVE-2026-65115

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-22T19:14:30Z

Weaknesses
  • CWE-400

    Uncontrolled Resource Consumption