CVE-2026-24184

Published: Aug 18, 2026Modified: Sep 2, 2026

8.8

Vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

NVIDIA Cumulus Linux contains a vulnerability in the Link Layer Discovery Protocol (LLDP) daemon component, where an unauthenticated attacker on an adjacent network could cause buffer overflow by sending crafted LLDP frames. A successful exploit of this vulnerability might lead to code execution.

Affected (2)

Products: Nvidia: Cumulus Linux

1 product

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Nvidia Cumulus Linux	Up to 5.16.0
Nvidia Cumulus Linux	Up to 5.11.5

Related CWEs

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.

References (3)

https://github.com/NVIDIA/product-security/tree/main/2026/5817

Source: psirt@nvidia.com

Patch

https://nvd.nist.gov/vuln/detail/CVE-2026-24184

Source: psirt@nvidia.com

US Government Resource

https://www.cve.org/CVERecord?id=CVE-2026-24184

Source: psirt@nvidia.com

Third Party Advisory

Timeline

No history available yet.