CVE-2026-24184

An unauthenticated attacker on an adjacent network can trigger a buffer overflow in the LLDP daemon of NVIDIA Cumulus Linux via crafted LLDP frames, potentially leading to code execution. CVSS 3.1 scores this HIGH (7.5) with no privileges required; exploitation details are not publicly available....

CVE-2026-72265

In the Linux kernel, CVE-2026-72265 fixes a memory leak in fbdev/nvidiafb_probe. In nvidiafb_probe(), memory allocated for modelist in nvidia_set_fbinfo() was not freed on error paths; the fix calls fb_destroy_modelist() to free it. No exploitation details are provided in the documents.

GO-2024-3239 vulnerabilities

Vulnerabilities for packages: nvidia-container-toolkit, nvidia-gpu-operator-validator...

GO-2024-3237 vulnerabilities

Vulnerabilities for packages: nvidia-container-toolkit, nvidia-gpu-operator-validator...

GO-2025-3992 vulnerabilities

Vulnerabilities for packages: nvidia-container-toolkit...

GO-2026-4403 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, nvidia-nsight-compute-13.2...

GO-2025-3750 vulnerabilities

Vulnerabilities for packages: nvidia-nsight-compute-12.8, newrelic-fluent-bit-output, nvidia-nsight-compute-13.0, kubeflow-katib, nvidia-nsight-compute-13.1, go, nvidia-nsight-compute-12.9...

GO-2025-3828 vulnerabilities

Vulnerabilities for packages: nvidia-nsight-compute-12.9, nvidia-nsight-compute-12.8, agentbeat, newrelic-fluent-bit-output, nvidia-nsight-compute-13.0, kubeflow-katib, nvidia-nsight-compute-13.1, nvidia-nsight-compute-13.2, nemo...

GO-2024-3237 vulnerabilities

Vulnerabilities for packages: nvidia-container-toolkit...

GO-2025-3992 vulnerabilities

Vulnerabilities for packages: nvidia-container-toolkit...

GO-2024-3239 vulnerabilities

Vulnerabilities for packages: nvidia-container-toolkit...

GO-2025-4097 vulnerabilities

Vulnerabilities for packages: node-feature-discovery, nvidia-container-toolkit, podman, k3s, sriov-network-device-plugin, kubernetes, grafana-alloy, buildah, falco-no-driver...

GO-2025-4096 vulnerabilities

Vulnerabilities for packages: node-feature-discovery, nvidia-container-toolkit, podman, k3s, sriov-network-device-plugin, kubernetes, grafana-alloy, buildah, falco-no-driver...

GO-2026-5761 vulnerabilities

Vulnerabilities for packages: node-feature-discovery, nvidia-container-toolkit, podman, k8s-device-plugin, sriov-network-device-plugin, cadvisor, buildah...

CVE-2026-63298 LXD arbitrary lxc.conf directive injection via NVIDIA instance configuration

An improper neutralization of special elements vulnerability in LXD's NVIDIA instance configuration handling allows an authenticated attacker to inject arbitrary configuration directives. By supplying newline characters within the 'nvidia.driver.capabilities' or 'nvidia.require.' configuration...

CVE-2026-63298

CVE-2026-63298 affects LXD with NVIDIA instance configuration handling. An improper neutralization of special elements lets an authenticated attacker inject arbitrary configuration directives by supplying newline characters in nvidia.driver.capabilities or nvidia.require.*, enabling manipulation ...

CVE-2026-63298 LXD arbitrary lxc.conf directive injection via NVIDIA instance configuration

An improper neutralization of special elements vulnerability in LXD's NVIDIA instance configuration handling allows an authenticated attacker to inject arbitrary configuration directives. By supplying newline characters within the 'nvidia.driver.capabilities' or 'nvidia.require.' configuration...

CVE-2026-63298

An improper neutralization of special elements vulnerability in LXD's NVIDIA instance configuration handling allows an authenticated attacker to inject arbitrary configuration directives. By supplying newline characters within the 'nvidia.driver.capabilities' or 'nvidia.require.' configuration...

JLSEC-2026-1174 FFmpeg versions 4.4 through 8.1.2 contain a double-free vulnerability in the NVIDIA NVDEC...

FFmpeg versions 4.4 through 8.1.2 contain a double-free vulnerability in the NVIDIA NVDEC hardware decoder within libavcodec/nvdec.c that allows attackers to trigger memory corruption by supplying a crafted video file. When no decoder surfaces remain, the ffnvdecstartframesepref error path frees...

CVE-2026-47623

NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause deserialization of untrusted data. A successful exploit of this vulnerability might lead to denial of service and data tampering...