CVE-2026-24187

HighCVSS 8.8/10Last modified Jul 20, 2026

Description

NVIDIA Display Driver for Linux contains a vulnerability where an attacker could cause a use-after-free. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure, data tampering, and code execution.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

VendorProductVersions
NVIDIAGeForceAll driver versions prior to 595.71.05
NVIDIAGeForceAll driver versions prior to 580.159.03
NVIDIAGeForceAll driver versions prior to 535.309.01
NVIDIANVIDIA RTX, Quadro, NVSAll driver versions prior to 595.71.05
NVIDIANVIDIA RTX, Quadro, NVSAll driver versions prior to 580.159.03
NVIDIANVIDIA RTX, Quadro, NVSAll driver versions prior to 535.309.01
NVIDIATeslaAll driver versions prior to 595.71.05
NVIDIATeslaAll driver versions prior to 580.159.03
NVIDIATeslaAll driver versions prior to 535.309.01
NVIDIAGuest driver595.58.03(All versions prior to and including vGPU 20.0)
NVIDIAGuest driver580.126.09(All versions prior to and including vGPU 19.4)
NVIDIAGuest driver535.288.01(All versions prior to and including vGPU 16.13)
NVIDIAGuest driver595.58.03(All versions up to and including the March 2026 release)
NVIDIAVirtual GPU Manager595.58.02(All versions up to and including the March 2026 release)
NVIDIAVirtual GPU Manager595.58.02(All versions prior to and including vGPU 20.0)
NVIDIAVirtual GPU Manager580.126.08(All versions prior to and including vGPU 19.4)
NVIDIAVirtual GPU Manager535.288.01(All versions prior to and including vGPU 16.13)

References

Timeline

Published
May 26, 2026
Last modified
Jul 20, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-241887.5NVIDIA TensorRT contains a vulnerability where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability miCVE-2026-241898.2NVIDIA CUDA-Q contains a vulnerability in an endpoint, where an unauthenticated attacker could cause an out-of-bounds read by sending a maliCVE-2026-24192.7The WP-DownloadManager plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.69 via the 'download_patCVE-2026-241907.8NVIDIA Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a user could cause improper access to GCVE-2026-241917.8NVIDIA Display Driver for Windows contains a vulnerability where an attacker could cause a time-of-check time-of-use issue. A successful expCVE-2026-241927.8NVIDIA Display Driver for Linux contains a vulnerability where an attacker could cause an incorrect conversion between numeric types, leadinCVE-2026-241937.8NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker could cause an out-of-bounds write. A successful explCVE-2026-241947.8NVIDIA Display Driver for Linux contains a vulnerability in a kernel mode layer handler, where a user could cause improper permission handliCVE-2026-241955.5NVIDIA Display Driver for Linux contains a vulnerability in UVM, where a user could cause improper input validation. A successful exploit ofCVE-2026-241967.1NVIDIA Display Driver for Linux contains a vulnerability where a user could cause an out-of-bounds read. A successful exploit of this vulnerCVE-2026-241976.5NVIDIA Display Driver for Linux contains a vulnerability in the Multi-Instance GPU (MIG) partition management, where an insecure default iniCVE-2026-241985.6NVIDIA GPU Display Driver for Linux contains a vulnerability where an advanced attacker could use a race condition to leak sensitive memory