CVE-2026-24194
7.8 HIGHNVIDIA Display Driver for Linux contains a vulnerability in a kernel mode layer handler, where a user could cause improper permission han...
Published: 2026-05-26 · Last updated: 2026-06-11
Severity and scoring
- CVSS
- 7.8 HIGH
- Vector
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CWE
- CWE-281
Affected products
| Vendor | Product |
|---|---|
| nvidia | gpu_display_driver |
Description
NVIDIA Display Driver for Linux contains a vulnerability in a kernel mode layer handler, where a user could cause improper permission handling. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure, data tampering, and code execution.
Source: NVD
References
Related CVEs
Same vendor
- CVE-2026-24237 — NVIDIA NVTabular contains a vulnerability where an attacker could cause improper deserialization of untrusted data (7.8 HIGH)
- CVE-2026-24221 — NVIDIA NVTabular contains a vulnerability where an attacker could cause improper deserialization of untrusted data (7.8 HIGH)
- CVE-2026-24199 — NVIDIA Display Driver for Linux contains a vulnerability in a kernel module, where a user could cause a race condition by reordering comp... (4.7 MEDIUM)
- CVE-2026-24197 — NVIDIA Display Driver for Linux contains a vulnerability in the Multi-Instance GPU (MIG) partition management, where an insecure default ... (6.5 MEDIUM)
- CVE-2026-24196 — NVIDIA Display Driver for Linux contains a vulnerability where a user could cause an out-of-bounds read (7.1 HIGH)
Same CWE
- CVE-2024-47270 — Improper preservation of permissions vulnerability in Archiving Push functionality in Synology Surveillance Station before 9.2.2-11575 an... (2.7 LOW)
- CVE-2026-44832 — Snipe-IT is an IT asset/license management system (8.8 HIGH)
- CVE-2026-34744 — Mantis Bug Tracker (MantisBT) is an open source issue tracker
- CVE-2026-34600 — Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks (5.7 MEDIUM)
- CVE-2026-25850 — in OpenHarmony v6.0 and prior versions allow a local attacker cause information leak (5.5 MEDIUM)