NVIDIA Fixes Linux Component Flaws That Could Expose Sensitive System Information
Brief
NVIDIA released a security update for its Infrastructure Controller software for Linux, addressing 14 vulnerabilities that could let attackers access sensitive system information, execute code, alter data, or disrupt affected environments.
The update, published in NVIDIA’s September 2026 Infrastructure Controller security bulletin, affects versions 0 through 1.
- NVIDIA recommends that organizations clone or update the software to version 2. 0 or later to address all reported issues.
Among the patched flaws is CVE-2026-65127, a medium-severity vulnerability caused by uncleared debug information. The issue carries a CVSS score of 4. 1 and is tracked as CWE-1258.
An attacker with local access, high privileges, and favorable conditions could potentially retrieve sensitive system information left exposed through debugging artifacts.