CVE-2026-24153

| EUVD-2026-17512 MEDIUM
2026-03-31 nvidia
5.2
CVSS 3.1
Share

CVSS Vector

CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
Attack Vector
Physical
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Changed
Confidentiality
High
Integrity
None
Availability
None

Lifecycle Timeline

3
EUVD ID Assigned
Mar 31, 2026 - 17:16 euvd
EUVD-2026-17512
Analysis Generated
Mar 31, 2026 - 17:16 vuln.today
CVE Published
Mar 31, 2026 - 16:23 nvd
MEDIUM 5.2

Description

NVIDIA Jetson Linux has a vulnerability in initrd, where the nvluks trusted application is not disabled. A successful exploit of this vulnerability might lead to information disclosure.

Analysis

Information disclosure in NVIDIA Jetson Linux affects Xavier, Orin, and Thor series devices due to the nvluks trusted application remaining enabled in initrd. A local attacker with physical access and low-level privileges can exploit this to read sensitive data from the device, as confirmed by CWE-501 (CLS: Malicious Code Not Included in Executable) indicating improper access control to privileged components. …

Sign in for full analysis, threat intelligence, and remediation guidance.

Priority Score

26
Low Medium High Critical
KEV: 0
EPSS: +0.0
CVSS: +26
POC: 0

Share

CVE-2026-24153 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy