The Open GPU Vulnerability Database
An open project to list all known vulnerabilities in the stack GPU datacenters run on.
3,567 entries460 critical134 known exploited
The stack, top to bottom6 layers
criticalhighmediumlowSelect a layer to filter
Showing 60 of 3,567 entries · 460 critical · 134 known exploited
Insyde InsydeH2O on ARM platforms (HDD password storage in UEFI variables): HDD passwords are recoverable from UEFImediumCVE-2026-8810Firmware, BMC & network fabricINSYDE-SA-2026005Aug 19, 2026NVIDIA Triton Inference Server: A path traversal scored 9.8 (network, no privileges, fullcriticalCVE-2026-47627NVIDIA / GPU stackAug 18, 2026NVIDIA Cumulus Linux: Improper privilege management in the user-management component lets an unprivileged switch userhighCVE-2026-24183NVIDIA / GPU stackAug 18, 2026NVIDIA Cumulus Linux - LLDP daemon: Crafted LLDP frames overflow a buffer in the LLDP daemon, reaching code executionhighCVE-2026-24184NVIDIA / GPU stackAug 18, 2026NVIDIA Triton Inference Server: Allocation of resources without limits lets an unauthenticated caller exhausthighCVE-2026-47628NVIDIA / GPU stackAug 18, 2026NVIDIA Triton Inference Server: Improper input validation crashes the serverhighCVE-2026-47629NVIDIA / GPU stackAug 18, 2026NVIDIA NVOS (network switches): With PKA-only SSH mode enabled, an administrator can inadvertently leave an alternativehighCVE-2026-24185NVIDIA / GPU stackAug 18, 2026NVIDIA Triton Inference Server: An absolute path traversal reaches code execution and information disclosuremediumCVE-2026-47606NVIDIA / GPU stackAug 18, 2026NVIDIA Triton Inference Server: An absolute path traversal reachable from a local low-privileged account reaches codemediumCVE-2026-47630NVIDIA / GPU stackAug 18, 2026Dell iDRAC9 / iDRAC10 (memory erase, data remanence): Data survives an iDRAC memory erase and stays readablelowCVE-2026-70412Firmware, BMC & network fabricDSA-2026-348Aug 17, 2026
Linux crypto driver for Marvell OCTEON TX: The scatter-gather cleanup path in the Marvell OCTEON TX crypto driver usescriticalCVE-2026-74280Firmware, BMC & network fabricAug 15, 2026Linux VXLAN driver (neighbour hardware address read in route_shortcircuit): TENANT ISOLATION: `route_shortcircuit()`criticalCVE-2026-74475Firmware, BMC & network fabricAug 15, 2026Linux kernel - NVMe-oF RDMA target, drivers/nvme/target/rdma.c: TENANT ISOLATION: nvmet_rdma_use_inline_sg() acceptedcriticalCVE-2026-72129Firmware, BMC & network fabricnvmet-rdma inline data nonzero offsetNVMe-oF RDMA inline scatterlist underflowAug 15, 2026Linux kernel - NVMe-oF target DH-HMAC-CHAP authentication, drivers/nvme/target/fabrics-cmd-auth.c: TENANT ISOLATIONcriticalCVE-2026-72130Kernel, userspace & hypervisornvmet-auth short AUTH_RECEIVE heap writeDH-HMAC-CHAP SUCCESS1 overflowAug 15, 2026Linux bnxt_en driver (XDP head-grow underflow): Head underflow when an XDP program grows the packet head on a BroadcomcriticalCVE-2026-74269Firmware, BMC & network fabricAug 15, 2026Linux kernel - SRP target (srpt), drivers/infiniband/ulp/srpt/ib_srpt.c: TENANT ISOLATION: An integer overflowcriticalCVE-2026-74394Firmware, BMC & network fabricRDMA/srpt immediate data integer overflowSRP targetAug 15, 2026Linux VXLAN driver (transmit-path header pulls): TENANT ISOLATION: `vxlan_xmit()`, `arp_reduce()`criticalCVE-2026-74474Firmware, BMC & network fabricAug 15, 2026Linux kernel - iSCSI TCP initiator, drivers/scsi/libiscsi_tcp.c: TENANT ISOLATION: The iSCSI initiator receives PDUcriticalCVE-2026-74556Kernel, userspace & hypervisorlibiscsi_tcp SCSI Response data segment overflowopen-iscsi initiator conn->data overflowAug 15, 2026Linux liquidio driver (Marvell/Cavium, cached VF pci_dev lookup table): TENANT ISOLATION: the LiquidIO PF caches VFcriticalCVE-2026-72329Firmware, BMC & network fabricAug 15, 2026Linux octeontx2-af (Marvell OCTEON CN10K, LMTLINE mailbox handler): TENANT ISOLATION: the OCTEON CN10K admin-functionhighCVE-2026-72045Firmware, BMC & network fabricAug 15, 2026
Linux KVM - intra-host migration/mirroring of SEV-SNP VMs: MULTI-TENANT ISOLATION: KVM allowed intra-host migrationhighCVE-2026-72286Firmware, BMC & network fabricAug 15, 2026Linux bnxt_re RoCE driver (CQ toggle page use-after-free): TENANT ISOLATION: the completion-queue varianthighCVE-2026-72499Firmware, BMC & network fabricAug 15, 2026Linux bnxt_re RoCE driver (SRQ toggle page use-after-free): TENANT ISOLATION: a use-after-free in the Broadcom RoCEhighCVE-2026-72500Firmware, BMC & network fabricAug 15, 2026Linux octeontx2-af (VF clobbering shared CGX PKIND state): TENANT ISOLATION: PF and VF NIX logical functions that sharehighCVE-2026-74527Firmware, BMC & network fabricAug 15, 2026Linux octeontx2-af (VF rx-mode affecting PF promiscuous state): TENANT ISOLATION: a VF setting its receive mode causeshighCVE-2026-72312Firmware, BMC & network fabricAug 15, 2026Linux kernel mlx5_core MACsec offload: TENANT ISOLATION: deleting an offloaded MACsec RX secure channel freeshighCVE-2026-72072Kernel, userspace & hypervisorAug 15, 2026Linux kernel amdkfd (KFD compute driver, /dev/kfd) (drm/amdkfd): MULTI-TENANT ISOLATION: A use-after-free in the amdkfdhighCVE-2026-72449Kernel, userspace & hypervisorAug 15, 2026Linux kernel mlx5_ib (queue pair sizing): set_rq_size() computes the receive-queue work-entry size as 1 << rq_wqe_shifthighCVE-2026-74297Kernel, userspace & hypervisorRDMA/mlx5 fix undefined shift of user RQ WQE sizeAug 15, 2026Linux kernel amdgpu RAS / GPU reset and recovery path (drm/amdgpu): MULTI-TENANT ISOLATION: An out-of-bounds accesshighCVE-2026-74357NVIDIA / GPU stackAug 15, 2026Linux kernel - RDMA/rxe (Soft-RoCE) responder, drivers/infiniband/sw/rxe/rxe_resp.c: TENANT ISOLATION: The sharedhighCVE-2026-74378Firmware, BMC & network fabricRDMA/rxe get_srq_wqe TOCTOUSoft-RoCE shared receive queue heap overflowAug 15, 2026Linux kernel amdkfd (KFD compute driver, /dev/kfd) (drm/amdkfd): A race condition or locking defect in the amdkfd (KFDhighCVE-2026-74446Kernel, userspace & hypervisorAug 15, 2026Linux kernel amdkfd (KFD compute driver, /dev/kfd) (drm/amdkfd): MULTI-TENANT ISOLATION: An out-of-bounds accesshighCVE-2026-74447Kernel, userspace & hypervisorAug 15, 2026Linux kernel amdgpu display core (DC/DM) (drm/amd/display): An out-of-bounds access in the amdgpu display core (DC/DM)highCVE-2026-74449NVIDIA / GPU stackAug 15, 2026Linux kernel amdgpu power management (SMU/powerplay) (drm/amd/pm): A use-after-free in the amdgpu power managementhighCVE-2026-74450NVIDIA / GPU stackAug 15, 2026Linux kernel i2c-mlxbf (BlueField DPU I2C controller): mlxbf_i2c_init_resource() frees a resource struct and then readsunscoredCVE-2026-72140Firmware, BMC & network fabrici2c: mlxbf use-after-free in mlxbf_i2c_init_resource()Aug 15, 2026Linux perf/x86/amd/brs - kernel address leakage through Branch Sampling: MULTI-TENANT ISOLATION: A user-only branchunscoredCVE-2026-72237Kernel, userspace & hypervisorAug 15, 2026Linux perf/x86/amd/core - Branch Sampling enabled from the SVM reload path: Branch Sampling and Last Branch RecordunscoredCVE-2026-72325Firmware, BMC & network fabricAug 15, 2026Linux kernel amdkfd (KFD compute driver, /dev/kfd) (drm/amdkfd): A correctness defect in the amdkfd (KFD computeunscoredCVE-2026-74353Kernel, userspace & hypervisorAug 15, 2026Linux kernel amdkfd (KFD compute driver, /dev/kfd) (drm/amdkfd): MULTI-TENANT ISOLATION: Memory is handed to a consumerunscoredCVE-2026-74448Kernel, userspace & hypervisorAug 15, 2026
IBM Storage Scale GUI (hardcoded inter-node token): A hardcoded token in the Storage Scale GUI source, usedhighCVE-2026-13460Control plane, storage & DevOpsAug 13, 2026Linux VXLAN driver (CAP_NET_ADMIN check on changelink across netns): TENANT ISOLATION: a VXLAN tunnel's `changelink()`highCVE-2026-68432Firmware, BMC & network fabricAug 12, 2026Insyde InsydeH2O (unverified firmware volume in the boot chain): Certain firmware volumes are executed without beinghighCVE-2026-6484Firmware, BMC & network fabricINSYDE-SA-2026003Aug 12, 2026Linux kernel amdkfd (KFD compute driver, /dev/kfd) (drm/amdkfd): A memory or reference-count leak in the amdkfd (KFDhighCVE-2026-68447Kernel, userspace & hypervisorAug 12, 2026open-iscsi iscsiuio (DHCPv6 handling): Integer underflow and out-of-bounds read in iscsiuio's DHCPv6 handlingmediumCVE-2026-18727Firmware, BMC & network fabricAug 12, 2026Linux kernel amdgpu RAS / GPU reset and recovery path (drm/amdgpu/gfx8): A correctness defect in the amdgpu RAS / GPUunscoredCVE-2026-68430NVIDIA / GPU stackAug 12, 2026Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A correctness defect in the amdgpu display core (DC/DM)unscoredCVE-2026-68436NVIDIA / GPU stackAug 12, 2026
Windows iSCSI Target Service (Windows Server 2012 through Windows Server 2025 / Windows 10 1607+): Three heap-basedcriticalCVE-2026-65791Firmware, BMC & network fabricCVE-2026-65679CVE-2026-65796Aug 11, 2026Intel TDX module, Ring 0 / Trust Domain context, multiple Intel platforms - INTEL-SA-01436: Improper authenticationhighCVE-2026-20885Firmware, BMC & network fabricTDX module improper authenticationAug 11, 2026Intel Gaudi / vLLM hardware plugin: Malformed input to the Gaudi vLLM plugin crashes or wedges the serving processmediumCVE-2026-27765NVIDIA / GPU stackAug 11, 2026Intel Gaudi / gaudi-container-runtime: MULTI-TENANT ISOLATION: A path-traversal bug in the container runtime shimmediumCVE-2026-32677NVIDIA / GPU stackAug 11, 2026Linux kernel amdgpu firmware, ACPI and IP-block initialisation (drm/amdgpu/vcn4): A correctness defect in the amdgpuhighCVE-2026-68107NVIDIA / GPU stackAug 10, 2026Linux kernel amdgpu firmware, ACPI and IP-block initialisation (drm/amdgpu/vce): An out-of-bounds access in the amdgpuhighCVE-2026-68108NVIDIA / GPU stackAug 10, 2026Linux kernel amdgpu kernel driver core (drm/amdgpu): A NULL pointer dereference in the amdgpu kernel driver corehighCVE-2026-68104NVIDIA / GPU stackAug 10, 2026Linux kernel amdgpu firmware, ACPI and IP-block initialisation (drm/amdgpu): A division by zero in the amdgpu firmwarehighCVE-2026-68106NVIDIA / GPU stackAug 10, 2026Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A use-after-free in the amdgpu display core (DC/DM)highCVE-2026-68236NVIDIA / GPU stackAug 10, 2026Linux kernel amdgpu GEM/VM/command-submission ioctl surface (drm/amdgpu): MULTI-TENANT ISOLATION: A use-after-freehighCVE-2026-68245NVIDIA / GPU stackAug 10, 2026Linux kernel amdkfd (KFD compute driver, /dev/kfd) (drm/amdkfd): MULTI-TENANT ISOLATION: An out-of-bounds accesshighCVE-2026-68257Kernel, userspace & hypervisorAug 10, 2026Linux kernel amdgpu RAS / GPU reset and recovery path (drm/amdgpu): MULTI-TENANT ISOLATION: A use-after-freehighCVE-2026-68273NVIDIA / GPU stackAug 10, 2026Linux kernel amdgpu user-mode queues (doorbell submission path) (drm/amdgpu): A correctness defect in the amdgpuhighCVE-2026-68103NVIDIA / GPU stackAug 10, 2026Linux kernel amdkfd (KFD compute driver, /dev/kfd) (drm/amdkfd): A correctness defect in the amdkfd (KFD computehighCVE-2026-68258Kernel, userspace & hypervisorAug 10, 2026