CVE-2026-24197
📛 CVE Title
(no title)
Description
NVIDIA Display Driver for Linux contains a vulnerability in Multi-Instance GPU (MIG) partition management, where an insecure default initialization of memory subsystem routing resources could lead to data corruption or a hang during partition reconfiguration. A successful exploit of this vulnerability might lead to denial of service.
Overview
- State
- —
- Assigner (CNA)
- —
- CVSS severity
- medium
- CVSS score
- 5.5 / 10
- CVSS vector
AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H- Effective score
- 5.5 / 10 MEDIUM source: CNA overview
- CWE(s)
- —
- Reserved
- —
- Published
- —
- Last updated
- —
- Source
- https://www.tenable.com/cve/CVE-2026-24197
NVD / KEV / EPSS data refreshed 2026-05-25 00:16 UTC. Re-run the 🛰 Backfill from NVD button above to refresh.
European Union Vulnerability Database ENISA EUVD
ENISA's official EU repository for curated vulnerability intelligence. Carries a separate identifier (EUVD-YYYY-NNNN) and frequently exposes an earlier-published description + CVSS than NVD does.
- EUVD ID
-
EUVD-2026-31926 - Assigner
- nvidia
- Published
- May 26, 2026, 5:19:40 PM
- Updated
- May 27, 2026, 3:44:16 PM
- EUVD base score (CVSS 3.1)
-
6.5 / 10
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H - EUVD-reported EPSS
- 0.1600
- Vendors
- NVIDIA
- Products
-
Tesla (All driver versions prior to 580.159.03)GeForce (All driver versions prior to 580.159.03)Virtual GPU Manager (580.126.08(All versions prior to and including vGPU 19.4))Virtual GPU Manager (595.58.02(All versions prior to and including vGPU 20.0))GeForce (All driver versions prior to 595.71.05)Tesla (All driver versions prior to 535.309.01)Virtual GPU Manager (595.94(All versions prior to and including vGPU 20.0))NVIDIA RTX, Quadro, NVS (All driver versions prior to 535.309.01)Tesla (All driver versions prior to 595.71.05)NVIDIA RTX, Quadro, NVS (All driver versions prior to 580.159.03)Virtual GPU Manager (582.16(All versions prior to and including vGPU 19.4))NVIDIA RTX, Quadro, NVS (All driver versions prior to 595.71.05)GeForce (All driver versions prior to 535.309.01)
- Aliases
-
GHSA-fmw6-8h3h-292c
ENISA description: NVIDIA Display Driver for Linux contains a vulnerability in the Multi-Instance GPU (MIG) partition management, where an insecure default initialization of memory subsystem routing resources could lead to data corruption or a hang during partition reconfiguration. A successful exploit of this vulnerability might lead to denial of service.
Vendor references (0)
References embedded in the original CVE record by the assigning CNA.
None in the CVE record.
Web references (4)
DuckDuckGo results ranked by threat-intel / vendor advisory domains. Generated by the 🔎 Find references (web) button above — same flow as the Remediations search.
- https://nvidia.custhelp.com/app/answers/detail/a_id/5821 tenable:nvidia.custhelp.com
- https://www.first.org/epss/ tenable:www.first.org
- https://nvd.nist.gov/vuln/detail/CVE-2026-24197 tenable:nvd.nist.gov
- https://www.cve.org/CVERecord?id=CVE-2026-24197 tenable:www.cve.org
Remediations (10)
-
web:blog.qualys.com
With Qualys Policy Audit's out-of-the-box mitigation or Compensatory Controls, which reduce the risk of a vulnerability being exploited because the remediation ( fix / patch ) cannot be done immediately, these security controls are not recommended by any industry standards, such as CIS and DISA-STIG.
2026-05-26 03:09 UTC -
web:blog.talosintelligence.com
Microsoft has released its monthly security update for May 2026 , which includes 137 vulnerabilities affecting a range of products, including 16 that Microsoft marked as "critical".
2026-05-26 03:09 UTC -
web:cyberpress.org
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two actively exploited Microsoft Defender vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, issuing an urgent remediation directive for federal agencies with a due date of June 3, 2026 .
2026-05-26 03:09 UTC -
web:portal.msrc.microsoft.com
The Security Update Guide provides information on the latest Microsoft security updates, helping users understand and address potential vulnerabilities effectively.
2026-05-26 03:09 UTC -
web:support.microsoft.com
Summary Improvements and fixes included in this update How to obtain and install the update How to obtain or download the latest cumulative update package for Linux More information File information Information about protection and security Summary This security update contains fixes and resolves vulnerabilities. To learn more about the vulnerabilities, see the following security advisories ...
2026-05-26 03:09 UTC -
web:www.bleepingcomputer.com
Today is Microsoft's April 2026 Patch Tuesday with security updates for 167 flaws, including 2 zero-day vulnerabilities.
2026-05-26 03:09 UTC -
web:www.cisa.gov
For the benefit of the cybersecurity community and network defenders—and to help every organization better manage vulnerabilities and keep pace with threat activity—CISA maintains the authoritative source of vulnerabilities that have been exploited in the wild. Organizations should use the KEV catalog as an input to their vulnerability management prioritization framework.
2026-05-26 03:09 UTC -
web:www.crowdstrike.com
Microsoft's April 2026 Patch Tuesday addresses 164 CVEs , featuring 8 Critical vulnerabilities, one exploited zero-day, and one disclosed zero-day.
2026-05-26 03:09 UTC -
web:www.pcworld.com
This month's Patch Tuesday includes an actively exploited Office zero-day vulnerability and several critical RCE bugs in Windows and Remote Desktop.
2026-05-26 03:09 UTC -
web:www.tenable.com
NVIDIA Display Driver for Linux contains a vulnerability in Multi-Instance GPU (MIG) partition management, where an insecure default initialization of memory subsystem routing resources could lead to data corruption or a hang during partition reconfiguration. A successful exploit of this vulnerability might lead to denial of service.
2026-05-26 03:09 UTC
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.