QSearchQSearch

CVE-2026-24194

7.8 HIGH

NVIDIA Display Driver for Linux contains a vulnerability in a kernel mode layer handler, where a user could cause improper permission han...

Published: 2026-05-26 · Last updated: 2026-06-11

Severity and scoring

CVSS
7.8 HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE
CWE-281

Affected products

VendorProduct
nvidiagpu_display_driver

Description

NVIDIA Display Driver for Linux contains a vulnerability in a kernel mode layer handler, where a user could cause improper permission handling. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure, data tampering, and code execution.

Source: NVD

References

Related CVEs

Same vendor

  • CVE-2026-24237 NVIDIA NVTabular contains a vulnerability where an attacker could cause improper deserialization of untrusted data (7.8 HIGH)
  • CVE-2026-24221 NVIDIA NVTabular contains a vulnerability where an attacker could cause improper deserialization of untrusted data (7.8 HIGH)
  • CVE-2026-24199 NVIDIA Display Driver for Linux contains a vulnerability in a kernel module, where a user could cause a race condition by reordering comp... (4.7 MEDIUM)
  • CVE-2026-24197 NVIDIA Display Driver for Linux contains a vulnerability in the Multi-Instance GPU (MIG) partition management, where an insecure default ... (6.5 MEDIUM)
  • CVE-2026-24196 NVIDIA Display Driver for Linux contains a vulnerability where a user could cause an out-of-bounds read (7.1 HIGH)

Same CWE

  • CVE-2024-47270 Improper preservation of permissions vulnerability in Archiving Push functionality in Synology Surveillance Station before 9.2.2-11575 an... (2.7 LOW)
  • CVE-2026-44832 Snipe-IT is an IT asset/license management system (8.8 HIGH)
  • CVE-2026-34744 Mantis Bug Tracker (MantisBT) is an open source issue tracker
  • CVE-2026-34600 Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks (5.7 MEDIUM)
  • CVE-2026-25850 in OpenHarmony v6.0 and prior versions allow a local attacker cause information leak (5.5 MEDIUM)