CVE-2026-24197

Published: May 26, 2026Modified: Jul 24, 2026

6.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Exploitability: 2.0 / Impact: 4.0

Source: psirt@nvidia.com (Secondary)

Description

NVIDIA Display Driver for Linux contains a vulnerability in the Multi-Instance GPU (MIG) partition management, where an insecure default initialization of memory subsystem routing resources could lead to data corruption or a hang during partition reconfiguration. A successful exploit of this vulnerability might lead to denial of service.

Affected (6)

Products: Nvidia: Gpu Display Driver

Nvidia

1 product

Gpu Display Driver

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Nvidia Gpu Display Driver	From 535 to 535.309.01
Nvidia Gpu Display Driver	From 580 to 580.159.03
Nvidia Gpu Display Driver	From 595 to 595.71.05
Nvidia Gpu Display Driver	From 535 to 539.72
Nvidia Gpu Display Driver	From 580 to 582.53
Nvidia Gpu Display Driver	From 595 to 595.36

Related CWEs

CWE-1188

Initialization of a Resource with an Insecure Default

The product initializes or sets a resource with a default that is intended to be changed by the administrator, but the default is not secure.

References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-24197

Source: psirt@nvidia.com

Third Party Advisory

https://nvidia.custhelp.com/app/answers/detail/a_id/5821

Source: psirt@nvidia.com

Vendor Advisory

https://www.cve.org/CVERecord?id=CVE-2026-24197

Source: psirt@nvidia.com

Third Party Advisory

Timeline

No history available yet.