CVE-2026-65131
Description
A flaw was found in NVIDIA NVSentinel. The platform-connectors component exposes a health-event interface over a world-writable Unix domain socket without requiring authentication. A local attacker can access this interface to trigger a Denial of Service (DoS).
Statement
This vulnerability is classified as Moderate impact because exploitation requires existing local system access and is confined to a denial-of-service condition without impacting system confidentiality or data integrity. NVIDIA NVSentinel is third-party software that is not packaged or distributed with Red Hat Enterprise Linux, limiting exposure to systems where this monitoring platform is explicitly deployed. In environments where the platform-connector service is active, the absence of access controls on the local communication socket allows local users to disrupt service availability.
Understanding the Weakness (CWE)
Access Control,Other
Technical Impact: Gain Privileges or Assume Identity; Varies by Context
Exposing critical functionality essentially provides an attacker with the privilege level of that functionality. The consequences will depend on the associated functionality, but they can range from reading or modifying sensitive data, accessing administrative or other privileged functionality, or possibly even executing arbitrary code.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
