CVE-2026-24198

Published: May 26, 2026Modified: Jul 24, 2026

5.6

Vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H

Exploitability: 0.8 / Impact: 4.7

Source: psirt@nvidia.com (Secondary)

Description

NVIDIA GPU Display Driver for Linux contains a vulnerability where an advanced attacker could use a race condition to leak sensitive memory, which might cause limited exposure of sensitive information to an unauthorized actor. A successful exploit of this vulnerability might lead to denial of service, data tampering, and information disclosure.

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-24198

Source: psirt@nvidia.com

https://nvidia.custhelp.com/app/answers/detail/a_id/5821

Source: psirt@nvidia.com

https://www.cve.org/CVERecord?id=CVE-2026-24198

Source: psirt@nvidia.com

Timeline

No history available yet.