CVE-2026-65127
Received Received - Intake

Information Disclosure in NVIDIA Infrastructure Controller for Linux

Vulnerability report for CVE-2026-65127, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.

Publication date: 2026-09-22

Last updated on: 2026-09-22

Assigner: NVIDIA Corporation

Description

NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause exposure of sensitive system information due to uncleared debug information. A successful exploit of this vulnerability might lead to information disclosure.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-22
Last Modified
2026-09-22
Generated
2026-09-22
AI Q&A
2026-09-22
EPSS Evaluated
N/A
NVD
EUVD

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
nvidia infrastructure_controller *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-1258 The hardware does not fully clear security-sensitive values, such as keys and intermediate values in cryptographic operations, when debug mode is entered.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in NVIDIA Infrastructure Controller for Linux allows an attacker to access sensitive system information due to debug information not being properly cleared. It could lead to unauthorized information disclosure.

Impact Analysis

An attacker could exploit this to gain access to confidential system details, potentially compromising security or enabling further attacks. The impact is limited to information disclosure with no direct code execution or system modification.

Compliance Impact

This vulnerability could lead to unauthorized exposure of personal or sensitive data, violating GDPR and HIPAA requirements for data protection and confidentiality.

Mitigation Strategies

Apply the latest security patches or updates provided by NVIDIA for the Infrastructure Controller for Linux to clear debug information. Monitor NVIDIA's security advisories for updates and restrict access to sensitive system information where possible.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-65127. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart