Executive brief
NVIDIA Dynamo is a deep learning optimization framework for Linux systems. A race condition in the LoRA (Low-Rank Adaptation) manager could allow an attacker to cause denial of service or corrupt data during concurrent initialization, potentially disrupting ML training workloads and compromising model integrity.
Technical details
The vulnerability is a race condition in the LoRA manager singleton initialization within NVIDIA Dynamo for Linux. The race condition occurs during concurrent access to the singleton object initialization, allowing multiple threads to execute initialization code simultaneously without proper synchronization. An attacker with local access or network access to trigger concurrent operations can exploit this to cause denial of service or data tampering. The vulnerability is medium severity with a CVSS score of 6.5, and has not been exploited in the wild at the time of advisory publication.
Affected products
- NVIDIA Dynamo
Timeline
- 2026-08-04: disclosed