NVIDIA Display Driver CVE-2026-24192

|

EUVD

EUVD-2026-31920 HIGH

Incorrect Conversion between Numeric Types (CWE-681)

2026-05-26 nvidia

GHSA-rjxx-gv4f-wj57

RCE Buffer Overflow Denial Of Service Information Disclosure Nvidia Geforce Rtx Quadro Nvs Tesla Virtual Gpu Manager

7.8

CVSS 3.1 · Vendor: nvidia

Share

Severity by source

Vendor (nvidia) PRIMARY

7.8 HIGH

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

SUSE

HIGH

qualitative

Primary rating from Vendor (nvidia).

CVSS VectorVendor: nvidia

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

2

Analysis Generated

Jun 08, 2026 - 10:22 vuln.today

CVE Published

May 26, 2026 - 17:14 nvd

HIGH 7.8

DescriptionCVE.org

NVIDIA Display Driver for Linux contains a vulnerability where an attacker could cause an incorrect conversion between numeric types, leading to a heap buffer overflow. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure, data tampering, and code execution.

AnalysisAI

Local privilege escalation in NVIDIA Display Driver for Linux (GeForce, RTX/Quadro/NVS, Tesla, and Virtual GPU Manager branches) stems from an incorrect numeric type conversion (CWE-681) that produces a heap buffer overflow. A locally authenticated attacker with low privileges can trigger the flaw to achieve code execution, privilege escalation, information disclosure, data tampering, or denial of service. No public exploit identified at time of analysis, and EPSS is very low (0.01%, 1st percentile), but technical impact per SSVC is total.

Technical ContextAI

The vulnerability sits in the proprietary NVIDIA kernel-mode/user-mode driver stack for Linux that exposes GPU services to user space (typically through device nodes such as /dev/nvidia*). CWE-681 (Incorrect Conversion Between Numeric Types) describes a class of bug where signed/unsigned or width mismatches during arithmetic - frequently on size or length fields supplied through ioctls - cause a downstream allocation or copy to be miscalculated, here resulting in a heap buffer overflow inside driver-managed memory. Affected CPEs span NVIDIA's GeForce consumer line, the RTX/Quadro/NVS professional line, Tesla datacenter GPUs, and the Virtual GPU Manager used in vGPU deployments, indicating the defective code path is shared across the unified Linux driver tree.

RemediationAI

Vendor-released patch: upgrade the Linux Display Driver to 535.309.01, 580.159.03, or 595.71.05 (whichever matches the deployed branch) for GeForce, RTX/Quadro/NVS, and Tesla, and update Virtual GPU Manager past vGPU 16.13 (535.x), vGPU 19.4 (580.x), or vGPU 20.0 / March 2026 release (595.x) per the NVIDIA Security Bulletin at https://nvidia.custhelp.com/app/answers/detail/a_id/5821 and https://vuldb.com/vuln/365758. Until patching is possible, restrict local access to systems running the driver, tighten permissions on the /dev/nvidia* device nodes (for example by limiting them to a trusted video/render group), and prevent untrusted users from executing GPU workloads on shared hosts or vGPU hypervisors - note the side effect that this will break legitimate user GPU access (CUDA, OpenGL, vGPU guest provisioning) for anyone removed from those groups, so this is only viable in tightly controlled environments.

More in Geforce

View all

CVE-2026-24187 HIGH This Week

Local privilege escalation and code execution in the NVIDIA Display Driver for Linux (GeForce, RTX/Quadro/NVS, Tesla, an

CVE-2026-24193 HIGH This Week

Local privilege escalation in the NVIDIA Display Driver for Windows and Linux allows an authenticated low-privileged use

CVE-2026-24191 HIGH This Week

Local privilege escalation in NVIDIA Display Driver for Windows (GeForce, RTX/Quadro/NVS, Tesla, and vGPU guest/manager

CVE-2026-24194 HIGH This Week

Local privilege escalation in NVIDIA Display Driver for Linux (GeForce, RTX/Quadro/NVS, Tesla, and vGPU guest drivers) a

CVE-2026-24190 HIGH This Week

Local privilege escalation in NVIDIA Display Driver for Windows and Linux allows authenticated low-privilege users to im

CVE-2026-24196 HIGH This Week

Out-of-bounds read in NVIDIA Display Driver for Linux (GeForce, RTX/Quadro/NVS, Tesla, and vGPU Guest drivers) allows a

CVE-2026-24197 MEDIUM This Month

NVIDIA Display Driver for Linux exposes a denial-of-service condition in the Multi-Instance GPU (MIG) partition manageme

CVE-2026-24182 MEDIUM This Month

Denial of service in NVIDIA Display Driver for Windows and Linux stems from improper lock management (CWE-667), where an

CVE-2025-33221 MEDIUM This Month

Incorrect permission assignment in the NVIDIA Display Driver kernel module on Windows and Linux allows a highly privileg

CVE-2026-24198 MEDIUM This Month

Race condition in NVIDIA GPU Display Driver for Linux allows a high-privileged local attacker to leak sensitive kernel o

CVE-2026-24199 MEDIUM This Month

Race condition exploitation in NVIDIA Display Driver's Linux kernel module allows a local authenticated user to cause de

Same weakness CWE-681 – Incorrect Conversion between Numeric Types

View all

CVE-2017-7308 HIGH POC

CVE-2016-3074 CRITICAL POC

CVE-2021-38187 CRITICAL POC

CVE-2022-34169 HIGH POC

CVE-2022-27882 HIGH POC

CVE-2021-27219 HIGH POC

CVE-2020-6582 HIGH POC

CVE-2019-16200 HIGH POC

Same technique RCE

View all

CVE-2021-44228 CRITICAL POC

CVE-2017-7269 CRITICAL POC

CVE-2022-47966 CRITICAL POC

CVE-2012-4681 CRITICAL POC

CVE-2023-3519 CRITICAL POC

CVE-2015-5119 CRITICAL POC

CVE-2016-4117 CRITICAL POC

CVE-2015-3113 CRITICAL POC

Vendor StatusVendor

SUSE

Severity: High

Product	Status
SUSE Linux Enterprise Desktop 15 SP7	Fixed
SUSE Linux Enterprise Desktop 15 SP7	Fixed
SUSE Linux Enterprise High Performance Computing 15 SP7	Fixed
SUSE Linux Enterprise High Performance Computing 15 SP7	Fixed
SUSE Linux Enterprise Micro 5.3	Fixed

Share

CVE-2026-24192 vulnerability details – vuln.today

Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy