An authenticated attacker can trigger a denial of service in the NVIDIA Infrastructure Controller for Linux by exploiting an uncontrolled resource consumption vulnerability.

This vulnerability (CWE-400) involves uncontrolled resource consumption within the NVIDIA Infrastructure Controller. An attacker with low-level privileges can leverage this flaw to exhaust system resources, resulting in a denial of service for the affected component.

The exploitation of this vulnerability can lead to significant service disruptions for systems relying on the NVIDIA Infrastructure Controller. While the CVSS score of 6.5 classifies this as a medium-severity issue, the potential for service unavailability can cause operational downtime and negatively impact business continuity for affected infrastructure.

Immediate Action: Update the NVIDIA Infrastructure Controller to the latest available version provided by the vendor to remediate the resource consumption flaw.

Proactive Monitoring: Monitor system resource usage, such as CPU and memory consumption, and review access logs for anomalous behavior that may indicate exploitation attempts.

Compensating Controls: Implement rate limiting or network traffic filtering to restrict the ability of unauthorized or malicious users to interact with the vulnerable service endpoint.

Public Exploit Available: Unknown

Organizations utilizing the NVIDIA Infrastructure Controller should prioritize updating to a version beyond 1.9 as soon as the vendor provides a patch. While the requirement for authentication reduces the attack surface, the risk of service disruption necessitates proactive patching and continuous monitoring of infrastructure health.