CVE-2026-24154

Published: Mar 31, 2026Modified: Apr 3, 2026

6.8

Vector

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 0.9 / Impact: 5.9

Source: NVD

Description

NVIDIA Jetson Linux has vulnerability in initrd, where an unprivileged attacker with physical access coul inject incorrect command line arguments. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, denial of service, data tampering, and information disclosure.

Affected (3)

Products: Nvidia: Jetson Linux

Nvidia

1 product

Jetson Linux

Configuration A

3 vulnerable · 17 platform

Vulnerable Software	Affected Versions
Nvidia Jetson Linux	Before 35.6.4
Nvidia Jetson Linux	From 36.0 to 36.5
Nvidia Jetson Linux	Version 38.2

Running on/with	Platform Versions
Nvidia Jetson Agx Orin 32gb	All versions
Nvidia Jetson Agx Orin 64gb	All versions
Nvidia Jetson Agx Orin Developer Kit	All versions
Nvidia Jetson Agx Orin Industrial	All versions
Nvidia Jetson Agx Thor Developer Kit	All versions
Nvidia Jetson Agx Xavier 32gb	All versions
Nvidia Jetson Agx Xavier 64gb	All versions
Nvidia Jetson Agx Xavier Industrial	All versions
Nvidia Jetson Orin Nano 4gb	All versions
Nvidia Jetson Orin Nano 8gb	All versions
Nvidia Jetson Orin Nano Super Developer Kit	All versions
Nvidia Jetson Orin Nx 16gb	All versions
Nvidia Jetson Orin Nx 8gb	All versions
Nvidia Jetson T4000	All versions
Nvidia Jetson T5000	All versions
Nvidia Jetson Xavier Nx 16gb	All versions
Nvidia Jetson Xavier Nx 8gb	All versions

Related CWEs

CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-24154

Source: psirt@nvidia.com

Third Party AdvisoryUS Government Resource

https://nvidia.custhelp.com/app/answers/detail/a_id/5797

Source: psirt@nvidia.com

Vendor Advisory

https://www.cve.org/CVERecord?id=CVE-2026-24154

Source: psirt@nvidia.com

Third Party Advisory

Timeline

No history available yet.