CVE-2026-65112 Overview
CVE-2026-65112 affects NVIDIA Infrastructure Controller for Linux. The vulnerability allows an authenticated network attacker to trigger uncontrolled resource consumption ([CWE-400]). Successful exploitation can lead to a denial of service condition against the controller.
The issue requires low privileges and no user interaction. The attack targets availability only, with no impact to confidentiality or integrity. NVIDIA published details through its product security repository on GitHub.
Critical Impact
Attackers with network access and low-level credentials can exhaust controller resources, disrupting infrastructure management operations that depend on the NVIDIA Infrastructure Controller.
Affected Products
- NVIDIA Infrastructure Controller for Linux
Discovery Timeline
- 2026-09-22 - CVE CVE-2026-65112 published to NVD
- 2026-09-22 - Last updated in NVD database
Technical Details for CVE-2026-65112
Vulnerability Analysis
The vulnerability is classified as uncontrolled resource consumption under [CWE-400]. The NVIDIA Infrastructure Controller for Linux fails to enforce limits on a resource an attacker can influence over the network. Repeated or crafted requests cause the controller to consume excessive CPU, memory, or handle capacity.
The attacker must be authenticated to the target environment. Because the attack vector is network-based and complexity is low, exploitation does not require sophisticated techniques. The result is service degradation or full denial of service affecting the controller and any workloads dependent on it.
No public proof-of-concept is available at the time of publication. The EPSS probability reported by FIRST is low, indicating limited expectation of exploitation activity in the near term.
Root Cause
The root cause is missing enforcement of resource quotas or rate limits within a network-accessible code path of the Infrastructure Controller. When invoked repeatedly by an authenticated principal, the affected operation allocates resources without releasing them promptly or without bounding total consumption.
Attack Vector
An authenticated attacker with network reachability to the Infrastructure Controller sends requests to the vulnerable endpoint. Sustained request volume or specifically shaped inputs cause the controller process to exhaust available system resources. See the NVIDIA product security advisory for vendor-specific technical details.
No verified exploit code is available. Refer to the NVD entry for CVE-2026-65112 and the CVE.org record for authoritative references.
Detection Methods for CVE-2026-65112
Indicators of Compromise
- Sudden spikes in CPU, memory, or file descriptor usage on hosts running the NVIDIA Infrastructure Controller.
- Unresponsive or crashing controller processes correlated with sustained inbound API traffic.
- Repeated authenticated requests from a single principal to the same controller endpoint within a short interval.
Detection Strategies
- Baseline normal request rates per authenticated account against the Infrastructure Controller and alert on statistical deviations.
- Monitor process-level resource telemetry for the controller binary and trigger alerts when thresholds are exceeded.
- Correlate authentication logs with resource utilization events to identify which principal initiated the load.
Monitoring Recommendations
- Forward controller host telemetry, authentication events, and API access logs to a central analytics platform for correlation.
- Track service availability with synthetic transactions against the controller to detect degradation early.
- Review NVIDIA's product security repository for updates or additional indicators tied to this advisory.
How to Mitigate CVE-2026-65112
Immediate Actions Required
- Apply the NVIDIA-supplied update for the Infrastructure Controller for Linux as documented in the NVIDIA product security advisory.
- Restrict network access to the controller management interface to trusted administrative networks only.
- Audit accounts with access to the controller and remove unused or over-privileged credentials.
Patch Information
Refer to the NVIDIA product security advisory for entry 5879 for the fixed version and upgrade guidance. Confirm the controller version in your environment against the vendor's remediation table before deployment.
Workarounds
- Enforce network-layer rate limiting or connection quotas in front of the Infrastructure Controller until patches are applied.
- Segment the controller onto a management VLAN reachable only from authorized administrative hosts.
- Monitor and automatically restart the controller service when resource utilization exceeds defined thresholds to reduce downtime.
Disclaimer: This content was generated using AI. While we strive for accuracy, please verify critical information with official sources.
