NVIDIA Triton Server DoS via expired FD abuse
CVE-2026-47478 Published on July 14, 2026
NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause the use of an expired file descriptor. A successful exploit of this vulnerability might lead to denial of service.
Vulnerability Analysis
CVE-2026-47478 is exploitable with network access, and does not require authorization privileges or user interaction. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality and integrity, and a high impact on availability.
Weakness Type
What is a Stale file descriptor Vulnerability?
The software uses or accesses a file descriptor after it has been closed. After a file descriptor for a particular file or device has been released, it can be reused. The code might not write to the original file, since the reused file descriptor might reference a different file or device.
CVE-2026-47478 has been classified to as a Stale file descriptor vulnerability or weakness.
Products Associated with CVE-2026-47478
Want to know whenever a new CVE is published for NVIDIA Triton Inference Server? stack.watch will email you.
Affected Versions
NVIDIA Triton Inference Server:- Before and including 26.04 is affected.