CVE-2026-47621

NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause a race condition in the LoRA manager singleton initialization. A successful exploit of this vulnerability might lead to denial of service and data tampering.

CVSS v3 6.5 MEDIUM

6.5^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.2 / Impact : 4.2

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact LOW

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://github.com/NVIDIA/product-security/tree/main/2026/5842	Product
https://nvd.nist.gov/vuln/detail/CVE-2026-47621	Third Party Advisory US Government Resource
https://www.cve.org/CVERecord?id=CVE-2026-47621	Third Party Advisory

Configurations

Configuration 1 (hide)

AND

cpe:2.3:a:nvidia:dynamo:*:*:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*

History

23 Oct 2026, 21:10

Type	Values Removed	Values Added
Summary		(es) NVIDIA Dynamo para Linux contiene una vulnerabilidad donde un atacante podría causar una condición de carrera en la inicialización del singleton del gestor de LoRA. Un exploit exitoso de esta vulnerabilidad podría conducir a denegación de servicio y manipulación de datos.

Information

Published : 2026-08-04 18:16

Updated : 2026-10-24 16:10

NVD link : CVE-2026-47621

Mitre link : CVE-2026-47621

CVE.ORG link : CVE-2026-47621

JSON object : View

Products Affected

linux

linux_kernel

nvidia

dynamo

CWE

CWE-367

Time-of-check Time-of-use (TOCTOU) Race Condition

{"id": "CVE-2026-47621", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-47621", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-08-04T18:25:12.332385Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "psirt@nvidia.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 4.2, "exploitabilityScore": 2.2}]}, "affected": [{"source": "psirt@nvidia.com", "affectedData": [{"vendor": "NVIDIA", "product": "Dynamo", "versions": [{"status": "affected", "version": "0 to v1.1.0"}], "platforms": ["Linux"], "defaultStatus": "unaffected"}]}], "published": "2026-08-04T18:16:51.733", "references": [{"url": "https://github.com/NVIDIA/product-security/tree/main/2026/5842", "tags": ["Product"], "source": "psirt@nvidia.com"}, {"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47621", "tags": ["Third Party Advisory", "US Government Resource"], "source": "psirt@nvidia.com"}, {"url": "https://www.cve.org/CVERecord?id=CVE-2026-47621", "tags": ["Third Party Advisory"], "source": "psirt@nvidia.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "psirt@nvidia.com", "description": [{"lang": "en", "value": "CWE-367"}]}], "descriptions": [{"lang": "en", "value": "NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause a race condition in the LoRA manager singleton initialization. A successful exploit of this vulnerability might lead to denial of service and data tampering."}, {"lang": "es", "value": "NVIDIA Dynamo para Linux contiene una vulnerabilidad donde un atacante podr\u00eda causar una condici\u00f3n de carrera en la inicializaci\u00f3n del singleton del gestor de LoRA. Un exploit exitoso de esta vulnerabilidad podr\u00eda conducir a denegaci\u00f3n de servicio y manipulaci\u00f3n de datos."}], "lastModified": "2026-10-24T16:10:00.153", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:nvidia:dynamo:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B5466BE4-35DF-40F0-98BA-8A91AA4B5740", "versionEndIncluding": "1.1.0"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "psirt@nvidia.com"}