NVIDIA BLUEFIELD FLAW LETS VM USERS EXECUTE CODE VIA CRAFTED MESSAGES

Summary from the TLDR InfoSec newsletter

NVIDIA patched CVE-2026-65094, a CVSS 9.0 Write-What-Where flaw in VIRTIO-Net on BlueField-3 DPUs that let adjacent VM users execute arbitrary code and break tenant isolation.