CVE-2026-24148

Published: Mar 31, 2026Modified: Jul 24, 2026

9.4

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L

Exploitability: 3.9 / Impact: 5.5

Source: NVD

Description

NVIDIA Jetson for JetPack contains a vulnerability in the system initialization logic, where an unprivileged attacker could cause the initialization of a resource with an insecure default. A successful exploit of this vulnerability might lead to information disclosure of encrypted data, data tampering, and partial denial of service across devices sharing the same machine ID.

Affected (2)

Products: Nvidia: Jetson Linux

Nvidia

1 product

Jetson Linux

Configuration A

2 vulnerable · 14 platform

Vulnerable Software	Affected Versions
Nvidia Jetson Linux	Before 35.6.4
Nvidia Jetson Linux	From 36.0 to 36.5

Running on/with	Platform Versions
Nvidia Jetson Agx Orin 32gb	All versions
Nvidia Jetson Agx Orin 64gb	All versions
Nvidia Jetson Agx Orin Developer Kit	All versions
Nvidia Jetson Agx Orin Industrial	All versions
Nvidia Jetson Agx Xavier 32gb	All versions
Nvidia Jetson Agx Xavier 64gb	All versions
Nvidia Jetson Agx Xavier Industrial	All versions
Nvidia Jetson Orin Nano 4gb	All versions
Nvidia Jetson Orin Nano 8gb	All versions
Nvidia Jetson Orin Nano Super Developer Kit	All versions
Nvidia Jetson Orin Nx 16gb	All versions
Nvidia Jetson Orin Nx 8gb	All versions
Nvidia Jetson Xavier Nx 16gb	All versions
Nvidia Jetson Xavier Nx 8gb	All versions

Related CWEs

CWE-1188

Initialization of a Resource with an Insecure Default

The product initializes or sets a resource with a default that is intended to be changed by the administrator, but the default is not secure.

References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-24148

Source: psirt@nvidia.com

Third Party AdvisoryUS Government Resource

https://nvidia.custhelp.com/app/answers/detail/a_id/5797

Source: psirt@nvidia.com

Vendor Advisory

https://www.cve.org/CVERecord?id=CVE-2026-24148

Source: psirt@nvidia.com

Third Party Advisory

Timeline

No history available yet.