CVE-2026-24153

Published: Mar 31, 2026Modified: Jul 24, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

NVIDIA Jetson Linux has a vulnerability in initrd, where the nvluks trusted application is not disabled. A successful exploit of this vulnerability might lead to information disclosure.

Affected (3)

Products: Nvidia: Jetson Linux

Nvidia

1 product

Jetson Linux

Configuration A

3 vulnerable · 17 platform

Vulnerable Software	Affected Versions
Nvidia Jetson Linux	Before 35.6.4
Nvidia Jetson Linux	From 36.0 to 36.5
Nvidia Jetson Linux	Version 38.2

Running on/with	Platform Versions
Nvidia Jetson Agx Orin 32gb	All versions
Nvidia Jetson Agx Orin 64gb	All versions
Nvidia Jetson Agx Orin Developer Kit	All versions
Nvidia Jetson Agx Orin Industrial	All versions
Nvidia Jetson Agx Thor Developer Kit	All versions
Nvidia Jetson Agx Xavier 32gb	All versions
Nvidia Jetson Agx Xavier 64gb	All versions
Nvidia Jetson Agx Xavier Industrial	All versions
Nvidia Jetson Orin Nano 4gb	All versions
Nvidia Jetson Orin Nano 8gb	All versions
Nvidia Jetson Orin Nano Super Developer Kit	All versions
Nvidia Jetson Orin Nx 16gb	All versions
Nvidia Jetson Orin Nx 8gb	All versions
Nvidia Jetson T4000	All versions
Nvidia Jetson T5000	All versions
Nvidia Jetson Xavier Nx 16gb	All versions
Nvidia Jetson Xavier Nx 8gb	All versions

Related CWEs

CWE-501

Trust Boundary Violation

The product mixes trusted and untrusted data in the same data structure or structured message.

References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-24153

Source: psirt@nvidia.com

Third Party AdvisoryUS Government Resource

https://nvidia.custhelp.com/app/answers/detail/a_id/5797

Source: psirt@nvidia.com

Vendor Advisory

https://www.cve.org/CVERecord?id=CVE-2026-24153

Source: psirt@nvidia.com

Third Party Advisory

Timeline

No history available yet.