Cumulus Linux Lts
Monthly
Remote code execution is possible in NVIDIA Cumulus Linux via its LLDP daemon, exploitable by an unauthenticated attacker positioned on an adjacent network segment. Sending crafted LLDP frames triggers a classic buffer overflow (CWE-120) in the daemon, with successful exploitation yielding full code execution on the affected network device. No public exploit code has been identified at time of analysis, and the vulnerability is not currently listed in the CISA KEV catalog, but the high-impact CVSS vector (C:H/I:H/A:H) warrants prompt remediation in network infrastructure environments.
Remote code execution is possible in NVIDIA Cumulus Linux via its LLDP daemon, exploitable by an unauthenticated attacker positioned on an adjacent network segment. Sending crafted LLDP frames triggers a classic buffer overflow (CWE-120) in the daemon, with successful exploitation yielding full code execution on the affected network device. No public exploit code has been identified at time of analysis, and the vulnerability is not currently listed in the CISA KEV catalog, but the high-impact CVSS vector (C:H/I:H/A:H) warrants prompt remediation in network infrastructure environments.