15098 matches found
PT-2026-96755
Name of the Vulnerable Software and Affected Versions NVIDIA NeMo affected versions not specified Description The TabularTokenizer class contains an unsafe deserialization issue. The software uses the pickle.load function to process untrusted .pkl files provided by an attacker without proper...
PT-2026-96739
Name of the Vulnerable Software and Affected Versions NVIDIA NeMo Speech affected versions not specified Description Malicious input created by an attacker could cause a code injection. This issue may lead to arbitrary code execution, information disclosure, and data tampering. Recommendations At...
CVE-2026-65129: Improper Certificate Validation
NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause improper certificate validation. A successful exploit of this vulnerability might lead to information disclosure, data tampering, and denial of service...
Security Bulletin: NVIDIA Infrastructure Controller - September 2026
NVIDIA has released a software update for NVIDIA® Infrastructure Controller. To protect your system, clone or update this software to version 2.0 or later from NVIDIA/infra-controller on GitHub. Go to NVIDIA Product Security. Details The following table summarizes the potential vulnerabilities th...
PT-2026-96738
Name of the Vulnerable Software and Affected Versions NVIDIA NeMo Speech affected versions not specified Description A flaw exists in the speech data explorer component that allows remote code execution when processing malicious data created by an attacker. This could result in escalation of...
PT-2026-96744
NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause use of a hard-coded password. A successful exploit of this vulnerability might lead to data tampering, denial of service, and information disclosure...
ROS-20260922-73-0099
The vulnerability of the tegra124emcpreparetimingchange function in the drivers/memory/tegra/tegra124-emc.c module of the NVIDIA Tegra system controller driver is related to the use of an erroneous operator. Exploiting this vulnerability could allow a remote attacker to compromise the...
CVE-2026-65117: Use of Hard-coded Password
NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause use of a hard-coded password. A successful exploit of this vulnerability might lead to data tampering, denial of service, and information disclosure...
PT-2026-96745
Name of the Vulnerable Software and Affected Versions NVIDIA Infrastructure Controller for Linux affected versions not specified Description An improper certificate validation flaw exists, which could allow an attacker to cause information disclosure, data tampering, and denial of service...
CVE-2026-65178: Deserialization of Untrusted Data
NVIDIA NeMo contains a vulnerability in its dataset-loading workflow where a maliciously crafted modelconfig.yaml can inject unsafe parameters. A successful exploit of this vulnerability may lead to code execution, data tampering, denial of service, and information disclosure...
CVE-2026-65115: Uncontrolled Resource Consumption
NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker may cause uncontrolled resource consumption. A successful exploit of this vulnerability may lead to denial of service...
PT-2026-96741
Name of the Vulnerable Software and Affected Versions NVIDIA Infrastructure Controller for Linux affected versions not specified Description NVIDIA Infrastructure Controller for Linux contains hard-coded credentials that can be used to authenticate to the controller/management interface. An...
Ubuntu 24.04 LTS / Pro Realtime 24.04 LTS : Linux kernel (NVIDIA Tegra) vulnerabilities (USN-8781-1)
"The remote Ubuntu 24.04 LTS / Pro Realtime 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8781-1 advisory. It was discovered that some Arm processors could complete a broadcast translation lookaside buffer TLB invalidation before memo...
CLEANSTART-2026-ZC33521 Security fix for CVE-2025-22873 applied in: cosign 2.4.3-r0, cosign 2.5.3-r0, flux-notification-controller-fips 1.5.0-r0, kubernetes-csi-node-driver-registrar 2.13.0-r0, nvidia-container-toolkit 1.19.0-r0, prometheus-node-exporter 1.8.0-r3, runc 1.1.14-r0
CVE-2025-22873 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-GY71678 Security fix for CVE-2026-41579 applied in: cadvisor 0.55.1-r1, cadvisor 0.56.2-r1, cadvisor 0.57.0-r1, cadvisor 0.57.0-r2, cadvisor 0.60.2-r1, nvidia-container-toolkit 1.19.0-r2
CVE-2026-41579 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-JK26072 Security fix for CVE-2025-50688 applied in: nvidia-container-toolkit 1.19.0-r3
Security vulnerability affects the nvidia-container-toolkit package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-ON51112 Security fix for CVE-2025-27612 applied in: nvidia-device-plugin 0.19.2-r1
Security vulnerability affects the nvidia-device-plugin package. This issue is resolved in later releases. See references for vulnerability details...
USN-8781-1 linux-nvidia-tegra vulnerabilities
It was discovered that some Arm processors could complete a broadcast translation lookaside buffer TLB invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been...
USN-8781-1: Linux kernel (NVIDIA Tegra) vulnerabilities
It was discovered that some Arm processors could complete a broadcast translation lookaside buffer TLB invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been...