CVE-2026-24153

MediumCVSS 5.5/10Last modified Jul 24, 2026

Description

NVIDIA Jetson Linux has a vulnerability in initrd, where the nvluks trusted application is not disabled. A successful exploit of this vulnerability might lead to information disclosure.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-501

Affected software

VendorProductVersions
NVIDIAJetson Xavier Series, Jetson Orin Series and Jetson ThorAll versions prior to 35.6.4
NVIDIAJetson Xavier Series, Jetson Orin Series and Jetson ThorAll versions prior to 36.5
NVIDIAJetson Xavier Series, Jetson Orin Series and Jetson Thor38.2

References

Timeline

Published
Mar 31, 2026
Last modified
Jul 24, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-241546.8NVIDIA Jetson Linux has vulnerability in initrd, where an unprivileged attacker with physical access coul inject incorrect command line arguCVE-2026-241557.8NVIDIA NeMo Framework for all platforms contains a code injection vulnerability. A successful exploit of this vulnerability might lead to coCVE-2026-241567.3NVIDIA DALI contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulneraCVE-2026-241579.8NVIDIA NeMo Framework contains a vulnerability in checkpoint loading where an attacker could cause remote code execution. A successful exploCVE-2026-241587.5NVIDIA Triton Inference Server contains a vulnerability in the HTTP endpoint where an attacker may cause a denial of service by providing a CVE-2026-241599.8NVIDIA NeMo Framework contains a vulnerability where an attacker may cause remote code execution. A successful exploit of this vulnerabilityCVE-2026-24167.5The Geo Mashup plugin for WordPress is vulnerable to SQL Injection via the 'sort' parameter in all versions up to, and including, 1.13.17. TCVE-2026-241607.5NVIDIA TRT-LLM for any platform contains a vulnerability where an attacker could cause an unchecked return value to a null pointer derefereCVE-2026-241627.8NVIDIA Transformers4Rec for Linux contains a vulnerability where an attacker could cause improper deserialization of untrusted data. A succeCVE-2026-241639.8NVIDIA TRT-LLM for any platform contains a vulnerability in RPC testing, where an attacker could cause an unsafe deserialization. A successCVE-2026-241649.8NVIDIA BioNeMo contains a vulnerability where a user could cause a deserialization of untrusted data. A successful exploit of this vulnerabiCVE-2026-241658.8NVIDIA BioNeMo contains a vulnerability where a user could cause a deserialization of untrusted data. A successful exploit of this vulnerabi
CVE-2026-24153: Medium severity, CVSS 5.5 | Vulnix