CVE-2026-24187_CVE-2026-24187

8.8 / 10

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Description

NVIDIA Display Driver for Linux contains a vulnerability where an attacker could cause a use-after-free. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure, data tampering, and code execution.

AI Analysis

NVIDIA Display Driver for Linux contains a use-after-free vulnerability, potentially leading to denial of service, escalation of privileges, information disclosure, data tampering, and code execution.

Basic Information

ID CVE-2026-24187

Source nvidia

Published May 26, 2026 at 17:12

Modified May 26, 2026 at 18:38

Affected Product

Vendor NVIDIA

Product GeForce

Version All driver versions prior to 595.71.05

Affected Versions NVIDIA GeForce All driver versions prior to 595.71.05
NVIDIA GeForce All driver versions prior to 580.159.03
NVIDIA GeForce All driver versions prior to 535.309.01
NVIDIA RTX, Quadro, NVS All driver versions prior to 595.71.05
NVIDIA RTX, Quadro, NVS All driver versions prior to 580.159.03
NVIDIA RTX, Quadro, NVS All driver versions prior to 535.309.01
NVIDIA Tesla All driver versions prior to 595.71.05
NVIDIA Tesla All driver versions prior to 580.159.03
NVIDIA Tesla All driver versions prior to 535.309.01
NVIDIA Guest driver 595.58.03(All versions prior to and including vGPU 20.0)
NVIDIA Guest driver 580.126.09(All versions prior to and including vGPU 19.4)
NVIDIA Guest driver 535.288.01(All versions prior to and including vGPU 16.13)
NVIDIA Guest driver 595.58.03(All versions up to and including the March 2026 release)
NVIDIA Virtual GPU Manager 595.58.02(All versions up to and including the March 2026 release)
NVIDIA Virtual GPU Manager 595.58.02(All versions prior to and including vGPU 20.0)
NVIDIA Virtual GPU Manager 580.126.08(All versions prior to and including vGPU 19.4)
NVIDIA Virtual GPU Manager 535.288.01(All versions prior to and including vGPU 16.13)

CWE Classification

CWE-416

AI Assessment

AI Score 8.8 / 10

AI Severity High

Vendor NVIDIA

Product NVIDIA Display Driver for Linux

Version prior to 595.71.05, prior to 580.159.03, prior to 535.309.01

References

{
    "lastseen": "",
    "description": "NVIDIA Display Driver for Linux contains a vulnerability where an attacker could cause a use-after-free. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure, data tampering, and code execution.",
    "published": "2026-05-26T17:12:42.081Z",
    "modified": "2026-05-26T18:38:49.840Z",
    "type": "cve",
    "title": "CVE-2026-24187",
    "source": "nvidia",
    "references": "https://nvd.nist.gov/vuln/detail/CVE-2026-24187\nhttps://www.cve.org/CVERecord?id=CVE-2026-24187\nhttps://nvidia.custhelp.com/app/answers/detail/a_id/5821",
    "id": "CVE-2026-24187",
    "bulletinFamily": "",
    "cwe": [
        "CWE-416"
    ],
    "cvelist": null,
    "sourceData": "NVIDIA GeForce All driver versions prior to 595.71.05\nNVIDIA GeForce All driver versions prior to 580.159.03\nNVIDIA GeForce All driver versions prior to 535.309.01\nNVIDIA RTX, Quadro, NVS All driver versions prior to 595.71.05\nNVIDIA RTX, Quadro, NVS All driver versions prior to 580.159.03\nNVIDIA RTX, Quadro, NVS All driver versions prior to 535.309.01\nNVIDIA Tesla All driver versions prior to 595.71.05\nNVIDIA Tesla All driver versions prior to 580.159.03\nNVIDIA Tesla All driver versions prior to 535.309.01\nNVIDIA Guest driver 595.58.03(All versions prior to and including vGPU 20.0)\nNVIDIA Guest driver 580.126.09(All versions prior to and including vGPU 19.4)\nNVIDIA Guest driver 535.288.01(All versions prior to and including vGPU 16.13)\nNVIDIA Guest driver 595.58.03(All versions up to and including the March 2026 release)\nNVIDIA Virtual GPU Manager 595.58.02(All versions up to and including the March 2026 release)\nNVIDIA Virtual GPU Manager 595.58.02(All versions prior to and including vGPU 20.0)\nNVIDIA Virtual GPU Manager 580.126.08(All versions prior to and including vGPU 19.4)\nNVIDIA Virtual GPU Manager 535.288.01(All versions prior to and including vGPU 16.13)",
    "sourceHref": "",
    "cvss": {
        "score": 8.8,
        "severity": "HIGH",
        "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
        "version": "3.1"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "GeForce",
    "version": "All driver versions prior to 595.71.05",
    "vendor": "NVIDIA",
    "ai_description": "NVIDIA Display Driver for Linux contains a use-after-free vulnerability, potentially leading to denial of service, escalation of privileges, information disclosure, data tampering, and code execution.",
    "ai_severity": "High",
    "ai_vendor": "NVIDIA",
    "ai_product": "NVIDIA Display Driver for Linux",
    "ai_version": "prior to 595.71.05, prior to 580.159.03, prior to 535.309.01",
    "ai_score": 8.8
}