CVE-2026-24199

MediumCVSS 4.7/10Last modified Jul 24, 2026

Description

NVIDIA Display Driver for Linux contains a vulnerability in a kernel module, where a user could cause a race condition by reordering compiler or processor memory instructions. A successful exploit of this vulnerability might lead to denial of service.

Metrics

CVSS 3.1 4.7/10CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-362

Affected software

VendorProductVersions
NVIDIAGeForceAll driver versions prior to 595.71.05
NVIDIAGeForceAll driver versions prior to 580.159.03
NVIDIAGeForceAll driver versions prior to 535.309.01
NVIDIANVIDIA RTX, Quadro, NVSAll driver versions prior to 595.71.05
NVIDIANVIDIA RTX, Quadro, NVSAll driver versions prior to 580.159.03
NVIDIANVIDIA RTX, Quadro, NVSAll driver versions prior to 535.309.01
NVIDIATeslaAll driver versions prior to 595.71.05
NVIDIATeslaAll driver versions prior to 580.159.03
NVIDIATeslaAll driver versions prior to 535.309.01
NVIDIAGuest driver580.126.09(All versions prior to and including vGPU 19.4)
NVIDIAGuest driver535.288.01(All versions prior to and including vGPU 16.13)
NVIDIAGuest driver595.58.03(All versions up to and including the March 2026 release)
NVIDIAVirtual GPU Manager595.58.02(All versions up to and including the March 2026 release)
NVIDIAVirtual GPU Manager580.126.08(All versions prior to and including vGPU 19.4)
NVIDIAVirtual GPU Manager535.288.01(All versions prior to and including vGPU 16.13)

References

Timeline

Published
May 26, 2026
Last modified
Jul 24, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-24204.4The LotekMedia Popup Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin settings in all versions up to, aCVE-2026-242007.0NVIDIA vGPU software contains a vulnerability in the virtual GPU manager, where an attacker could cause a use-after-free for stack memory. ACVE-2026-242015.8NVIDIA vGPU software contains a vulnerability in the virtual GPU manager, where an attacker could cause an out-of-bound access. A successfulCVE-2026-242046.5NVIDIA Flare SDK contains a vulnerability where an Attacker may cause an Improper Input Validation by path traversing. A successful exploit CVE-2026-242069.8NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause an authentication bypass. A successful exploit of thisCVE-2026-242079.8NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause an authentication bypass. A successful exploit of thisCVE-2026-242087.5NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a path traversal issue. A successful exploit of this vCVE-2026-242097.5NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a path traversal issue. A successful exploit of this vCVE-2026-24216.5The ilGhera Carta Docente for WooCommerce plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.5.0 vCVE-2026-242107.5NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause an integer overflow. A successful exploit of this vulnCVE-2026-242129.8NVIDIA Isaac Launchable for Linux contains a vulnerability where sensitive information is transmitted in clear text. A successful exploit ofCVE-2026-242139.8NVIDIA Triton Inference Server contains a vulnerability in the DALI backend where an attacker could cause an out-of-bounds read. A successfu
CVE-2026-24199: Medium severity, CVSS 4.7 | Vulnix