Skip to main content

NVIDIA Display Driver CVE-2026-24196

| EUVDEUVD-2026-31928 HIGH
Out-of-bounds Read (CWE-125)
2026-05-26 nvidia GHSA-jj37-x4fv-5h8m
Denial Of Service Information Disclosure Nvidia Buffer Overflow
7.1
CVSS 3.1 · Vendor: nvidia
Share

Severity by source

Vendor (nvidia) PRIMARY
7.1 HIGH
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
SUSE
HIGH
qualitative

Primary rating from Vendor (nvidia).

CVSS VectorVendor: nvidia

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
High

Lifecycle Timeline

2
Analysis Generated
Jun 08, 2026 - 09:32 vuln.today
CVE Published
May 26, 2026 - 17:20 nvd
HIGH 7.1

DescriptionCVE.org

NVIDIA Display Driver for Linux contains a vulnerability where a user could cause an out-of-bounds read. A successful exploit of this vulnerability might lead to denial of service and information disclosure.

AnalysisAI

Out-of-bounds read in NVIDIA Display Driver for Linux (GeForce, RTX/Quadro/NVS, Tesla, and vGPU Guest drivers) allows a locally authenticated user to trigger denial of service and information disclosure. The flaw carries a CVSS 3.1 score of 7.1 (AV:L/AC:L/PR:L), and per CISA SSVC there is no public exploit identified at time of analysis (Exploitation: none), with EPSS at 0.01% indicating negligible near-term exploitation likelihood. NVIDIA has published fixed driver versions across all affected branches in advisory ID 5821.

Technical ContextAI

The vulnerability is a CWE-125 (Out-of-bounds Read) in NVIDIA's Linux GPU display driver stack, which exposes kernel-mode and user-mode interfaces to local processes for graphics, compute (CUDA), and virtualization (vGPU Guest) workloads. Out-of-bounds reads in driver code typically occur when input validation on ioctl arguments, buffer sizes, or index calculations is insufficient, causing the driver to dereference memory beyond an allocated region. CPE data identifies four affected product families - nvidia:geforce, nvidia:rtx,_quadro,_nvs, nvidia:tesla, and nvidia:guest_driver - meaning consumer, professional workstation, datacenter, and virtual GPU guest drivers all share the vulnerable code path on Linux. Reading uninitialized or adjacent kernel memory can leak sensitive process or kernel data and, if the read crosses a mapping boundary, crash the driver and induce a system-wide denial of service.

RemediationAI

Vendor-released patches are available - upgrade Linux drivers to the fixed versions identified in NVIDIA security bulletin 5821 (https://nvidia.custhelp.com/app/answers/detail/a_id/5821): for GeForce, RTX/Quadro/NVS, and Tesla branches, install 580.159.03 or later in the R580 branch, 595.71.05 or later in the R595 branch, or 535.309.01 or later in the R535 LTSB branch; for vGPU Guest drivers, upgrade past 595.58.03 (post-March 2026 / vGPU 20.0), 580.126.09 (past vGPU 19.4), and 535.288.01 (past vGPU 16.13). On multi-tenant systems where immediate patching is not possible, compensating controls include restricting access to /dev/nvidia* device nodes via group membership and udev rules so only trusted users can issue GPU ioctls (trade-off: breaks unprivileged CUDA/graphics workloads), disabling GPU passthrough or vGPU profiles for untrusted guests, and monitoring dmesg and nvidia-smi for driver faults that may indicate exploitation attempts. Reboot is required after driver replacement because the kernel module must be reloaded.

More in Nvidia

View all
CVE-2016-1741 CRITICAL POC
9.8 Mar 24

The NVIDIA driver in the Graphics Drivers subsystem in Apple OS X before 10.11.4 allows attackers to execute arbitrary c
CVE-2013-0109 HIGH POC
7.2 Apr 08

The NVIDIA driver before 307.78, and Release 310 before 311.00, in the NVIDIA Display Driver service on Windows does not
CVE-2019-5684 CRITICAL POC
10.0 Aug 06

NVIDIA Windows GPU Display Driver (all versions) contains a vulnerability in DirectX drivers, in which a specially craft
CVE-2026-24207 CRITICAL POC
9.8 May 20

Authentication bypass in NVIDIA Triton Inference Server allows unauthenticated remote attackers to reach protected funct
CVE-2019-5685 CRITICAL POC
9.8 Aug 06

NVIDIA Windows GPU Display Driver (all versions) contains a vulnerability in DirectX drivers, in which a specially craft
CVE-2025-23359 HIGH POC
8.3 Feb 12

NVIDIA Container Toolkit for Linux contains a Time-of-Check Time-of-Use (TOCTOU) vulnerability when used with default co
CVE-2016-8812 HIGH POC
8.8 Nov 08

For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA GeForce Experience R340 before GFE 2.11.4.125 and R375 before G
CVE-2016-1861 HIGH POC
7.8 Jun 19

The NVIDIA Graphics Drivers subsystem in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privi
CVE-2024-0132 HIGH POC
8.3 Sep 26

NVIDIA Container Toolkit 1.16.1 or earlier contains a Time-of-check Time-of-Use (TOCTOU) vulnerability when used with de
CVE-2016-1846 HIGH POC
7.8 May 20

The nvCommandQueue::GetHandleIndex method in the NVIDIA Graphics Drivers subsystem in Apple OS X before 10.11.5 allows a
CVE-2015-7865 HIGH POC
7.7 Nov 24

nvSCPAPISvr.exe in the Stereoscopic 3D Driver Service in the NVIDIA GPU graphics driver R340 before 341.92, R352 before

CVE-2016-8811 HIGH POC
7.8 Nov 08

For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 3

Same weakness CWE-125 – Out-of-bounds Read

View all
CVE-2014-0160 HIGH POC
7.5
CVE-2016-5198 HIGH POC
8.8
CVE-2016-1646 HIGH POC
8.8
CVE-2025-5777 HIGH POC
7.5
CVE-2017-5030 HIGH POC
8.8
CVE-2016-4523 HIGH
7.5
CVE-2024-48456 HIGH POC
7.5
CVE-2024-48457 HIGH POC
7.5

Same technique Denial Of Service

View all
CVE-2015-5119 CRITICAL POC
9.8
CVE-2011-2462 CRITICAL POC
9.8
CVE-2011-0611 HIGH POC
8.8
CVE-2012-1889 HIGH POC
8.8
CVE-2012-0507 CRITICAL POC
9.8
CVE-2014-1761 HIGH POC
7.8
CVE-2015-5122 CRITICAL POC
9.8
CVE-2011-0609 HIGH POC
7.8

Vendor StatusVendor

SUSE

Severity: High
Product Status
SUSE Linux Enterprise Desktop 15 SP7 Fixed
SUSE Linux Enterprise Desktop 15 SP7 Fixed
SUSE Linux Enterprise High Performance Computing 15 SP7 Fixed
SUSE Linux Enterprise High Performance Computing 15 SP7 Fixed
SUSE Linux Enterprise Micro 5.3 Fixed

Share

CVE-2026-24196 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy