Skip to main content

NVIDIA Display Driver CVE-2026-24194

| EUVDEUVD-2026-31932 HIGH
Improper Preservation of Permissions (CWE-281)
2026-05-26 nvidia GHSA-p96j-2664-mgcr
Nvidia RCE Linux Information Disclosure Denial Of Service Geforce Rtx Quadro Nvs Tesla Guest Driver
7.8
CVSS 3.1 · Vendor: nvidia
Share

Severity by source

Vendor (nvidia) PRIMARY
7.8 HIGH
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
SUSE
HIGH
qualitative

Primary rating from Vendor (nvidia).

CVSS VectorVendor: nvidia

Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

2
Analysis Generated
Jun 08, 2026 - 10:22 vuln.today
CVE Published
May 26, 2026 - 17:24 nvd
HIGH 7.8

DescriptionCVE.org

NVIDIA Display Driver for Linux contains a vulnerability in a kernel mode layer handler, where a user could cause improper permission handling. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure, data tampering, and code execution.

AnalysisAI

Local privilege escalation in NVIDIA Display Driver for Linux (GeForce, RTX/Quadro/NVS, Tesla, and vGPU guest drivers) allows an authenticated local user to abuse improper permission handling in a kernel mode layer handler, enabling code execution, privilege elevation, and data tampering. CVSS 7.8 reflects high impact across confidentiality, integrity, and availability, but the attack vector is local and authenticated. No public exploit identified at time of analysis and EPSS is 0.01%, but SSVC marks technical impact as total.

Technical ContextAI

The flaw resides in a kernel mode layer (KMD) handler of NVIDIA's proprietary Linux GPU driver stack, which exposes IOCTL interfaces from userland to a privileged kernel module (nvidia.ko and related modules). The root cause maps to CWE-281 (Improper Preservation of Permissions), meaning the driver fails to correctly preserve, validate, or enforce permission state when handling a userland request inside the kernel. Affected products per CPE include consumer GeForce, professional RTX/Quadro/NVS, datacenter Tesla cards, and the vGPU guest driver - all of which share the common Linux kernel module codebase. Because the boundary crossed is user-to-kernel, a successful corruption of permission state yields ring-0 capabilities regardless of the GPU class.

RemediationAI

Vendor-released patches are available: upgrade GeForce, RTX/Quadro/NVS, and Tesla drivers to 535.309.01, 580.159.03, or 595.71.05 (depending on the branch you track), and upgrade vGPU guest drivers past 535.288.01 (vGPU 16.13), 580.126.09 (vGPU 19.4), or 595.58.03 (vGPU 20.0) per NVIDIA security bulletin https://nvidia.custhelp.com/app/answers/detail/a_id/5821. SUSE and other distribution maintainers ship these driver updates through their respective channels; reboot is required after the kernel module is replaced. Where immediate patching is not possible, restrict access to /dev/nvidia*, /dev/nvidiactl, and /dev/nvidia-uvm device nodes to a trusted group (the typical 'video' group) and revoke shell access from untrusted local users on shared GPU hosts - note this will break GPU access for any user removed from the group, including container workloads relying on those device nodes. On vGPU hypervisors, patch the guest driver inside each VM, since the flaw is in the in-guest kernel module rather than the host vGPU manager.

More in Geforce

View all
CVE-2026-24187 HIGH
8.8 May 26

Local privilege escalation and code execution in the NVIDIA Display Driver for Linux (GeForce, RTX/Quadro/NVS, Tesla, an
CVE-2026-24193 HIGH
7.8 May 26

Local privilege escalation in the NVIDIA Display Driver for Windows and Linux allows an authenticated low-privileged use
CVE-2026-24192 HIGH
7.8 May 26

Local privilege escalation in NVIDIA Display Driver for Linux (GeForce, RTX/Quadro/NVS, Tesla, and Virtual GPU Manager b
CVE-2026-24191 HIGH
7.8 May 26

Local privilege escalation in NVIDIA Display Driver for Windows (GeForce, RTX/Quadro/NVS, Tesla, and vGPU guest/manager

CVE-2026-24190 HIGH
7.8 May 26

Local privilege escalation in NVIDIA Display Driver for Windows and Linux allows authenticated low-privilege users to im
CVE-2026-24196 HIGH
7.1 May 26

Out-of-bounds read in NVIDIA Display Driver for Linux (GeForce, RTX/Quadro/NVS, Tesla, and vGPU Guest drivers) allows a

CVE-2026-24197 MEDIUM
6.5 May 26

NVIDIA Display Driver for Linux exposes a denial-of-service condition in the Multi-Instance GPU (MIG) partition manageme
CVE-2026-24182 MEDIUM
6.5 May 26

Denial of service in NVIDIA Display Driver for Windows and Linux stems from improper lock management (CWE-667), where an
CVE-2025-33221 MEDIUM
6.0 May 26

Incorrect permission assignment in the NVIDIA Display Driver kernel module on Windows and Linux allows a highly privileg
CVE-2026-24198 MEDIUM
5.6 May 26

Race condition in NVIDIA GPU Display Driver for Linux allows a high-privileged local attacker to leak sensitive kernel o
CVE-2026-24199 MEDIUM
4.7 May 26

Race condition exploitation in NVIDIA Display Driver's Linux kernel module allows a local authenticated user to cause de

Same weakness CWE-281 – Improper Preservation of Permissions

View all
CVE-2017-8543 CRITICAL
9.8
CVE-2024-46310 CRITICAL POC
9.1
CVE-2017-8589 CRITICAL
9.8
CVE-2024-54879 CRITICAL POC
9.1
CVE-2024-41650 CRITICAL POC
9.8
CVE-2024-41649 CRITICAL POC
9.8
CVE-2024-41648 CRITICAL POC
9.8
CVE-2024-41646 CRITICAL POC
9.8

Same technique RCE

View all
CVE-2021-44228 CRITICAL POC
10.0
CVE-2017-7269 CRITICAL POC
9.8
CVE-2022-47966 CRITICAL POC
9.8
CVE-2012-4681 CRITICAL POC
9.8
CVE-2023-3519 CRITICAL POC
9.8
CVE-2015-5119 CRITICAL POC
9.8
CVE-2016-4117 CRITICAL POC
9.8
CVE-2015-3113 CRITICAL POC
9.8

Vendor StatusVendor

SUSE

Severity: High
Product Status
SUSE Linux Enterprise Desktop 15 SP7 Fixed
SUSE Linux Enterprise Desktop 15 SP7 Fixed
SUSE Linux Enterprise High Performance Computing 15 SP7 Fixed
SUSE Linux Enterprise High Performance Computing 15 SP7 Fixed
SUSE Linux Enterprise Micro 5.3 Fixed

Share

CVE-2026-24194 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy