PT-2026-77262

Name of the Vulnerable Software and Affected Versions NVIDIA Triton Inference Server for Linux affected versions not specified Description An issue exists where an attacker can trigger an unlimited allocation of resources, which may result in a denial of service a condition where the system becom...

CVE-2026-24184: Buffer Copy without Checking Size of Input

NVIDIA Cumulus Linux contains a vulnerability in the Link Layer Discovery Protocol LLDP daemon component, where an unauthenticated attacker on an adjacent network could cause buffer overflow by sending crafted LLDP frames. A successful exploit of this vulnerability might lead to code execution...

Security Bulletin: NVIDIA Cumulus Linux and NVOS - August 2026

NVIDIA has released a software update for NVIDIA® Cumulus Linux and NVOS. To protect your system, download and install the latest NVIDIA components from the NVIDIA Enterprise Support Portal. Go to NVIDIA Product Security. Details The following table summarizes the potential vulnerabilities that...

CVE-2026-72265

In the Linux kernel, CVE-2026-72265 fixes a memory leak in fbdev/nvidiafb_probe. In nvidiafb_probe(), memory allocated for modelist in nvidia_set_fbinfo() was not freed on error paths; the fix calls fb_destroy_modelist() to free it. No exploitation details are provided in the documents.

CVE-2026-72265: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: fbdev: nvidia: fix potential memory leak in nvidiafbprobe In nvidiafbprobe, the memory allocated for modelist in nvidiasetfbinfo is not freed in the subsequent error paths. Fix that by calling fbdestroymodelist...

GO-2024-3239 vulnerabilities

Vulnerabilities for packages: nvidia-container-toolkit...

GO-2025-3992 vulnerabilities

Vulnerabilities for packages: nvidia-container-toolkit...

GO-2024-3237 vulnerabilities

Vulnerabilities for packages: nvidia-container-toolkit...

GO-2026-4403 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, nvidia-nsight-compute-13.2...

GO-2025-3750 vulnerabilities

Vulnerabilities for packages: go, nvidia-nsight-compute-13.0, nvidia-nsight-compute-13.1, kubeflow-katib, newrelic-fluent-bit-output, nvidia-nsight-compute-12.8, nvidia-nsight-compute-12.9...

GO-2025-3828 vulnerabilities

Vulnerabilities for packages: agentbeat, nvidia-nsight-compute-13.0, nemo, nvidia-nsight-compute-13.1, kubeflow-katib, newrelic-fluent-bit-output, nvidia-nsight-compute-13.2, nvidia-nsight-compute-12.8, nvidia-nsight-compute-12.9...

GO-2024-3237 vulnerabilities

Vulnerabilities for packages: nvidia-container-toolkit...

GO-2024-3239 vulnerabilities

Vulnerabilities for packages: nvidia-container-toolkit...

GO-2025-3992 vulnerabilities

Vulnerabilities for packages: nvidia-container-toolkit...

GO-2025-4096 vulnerabilities

Vulnerabilities for packages: buildah, grafana-alloy, node-feature-discovery, sriov-network-device-plugin, falco-no-driver, nvidia-container-toolkit, kubernetes, podman, k3s...

GO-2025-4097 vulnerabilities

Vulnerabilities for packages: buildah, grafana-alloy, node-feature-discovery, sriov-network-device-plugin, falco-no-driver, nvidia-container-toolkit, kubernetes, podman, k3s...

GO-2026-5761 vulnerabilities

Vulnerabilities for packages: buildah, k8s-device-plugin, node-feature-discovery, sriov-network-device-plugin, falco-no-driver, nvidia-container-toolkit, cadvisor, podman, docker-machine-driver-harvester...

NVIDIA Transformers4Rec load_model_trainer_states_from_checkpoint Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of NVIDIA Transformers4Rec. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

DEBIAN-CVE-2026-63298

An improper neutralization of special elements vulnerability in LXD's NVIDIA instance configuration handling allows an authenticated attacker to inject arbitrary configuration directives. By supplying newline characters within the 'nvidia.driver.capabilities' or 'nvidia.require.' configuration...

CVE-2026-63298 LXD arbitrary lxc.conf directive injection via NVIDIA instance configuration

An improper neutralization of special elements vulnerability in LXD's NVIDIA instance configuration handling allows an authenticated attacker to inject arbitrary configuration directives. By supplying newline characters within the 'nvidia.driver.capabilities' or 'nvidia.require.' configuration...