CVE-2026-24195 (GCVE-0-2026-24195)

Vulnerability from cvelistv5 – Published: 2026-05-26 17:15 – Updated: 2026-05-26 18:38
VLAI
Summary
NVIDIA Display Driver for Linux contains a vulnerability in UVM, where a user could cause improper input validation. A successful exploit of this vulnerability might lead to denial of service.
Severity
7.1 (High)
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
SSVC
Exploitation: none Automatable: no Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-05-26 18:27 UTC
CWE
  • CWE-20 - Improper Input Validation
Assigner
References
Impacted products
Vendor Product Version CPE status
NVIDIA Guest driver Affected: 595.58.03(All versions prior to and including vGPU 20.0)
guessed Create a notification for this product.
NVIDIA Guest driver Affected: 580.126.09(All versions prior to and including vGPU 19.4)
guessed Create a notification for this product.
NVIDIA Guest driver Affected: 595.58.03(All versions up to and including the March 2026 release)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-24195",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-26T18:27:42.793026Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-26T18:38:21.943Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Linux(R595 vGPU 20)"
          ],
          "product": "Guest driver",
          "vendor": "NVIDIA",
          "versions": [
            {
              "status": "affected",
              "version": "595.58.03(All versions prior to and including vGPU 20.0)"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Linux(R580 vGPU 19)"
          ],
          "product": "Guest driver",
          "vendor": "NVIDIA",
          "versions": [
            {
              "status": "affected",
              "version": "580.126.09(All versions prior to and including vGPU 19.4)"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Linux(Cloud Gaming)"
          ],
          "product": "Guest driver",
          "vendor": "NVIDIA",
          "versions": [
            {
              "status": "affected",
              "version": "595.58.03(All versions up to and including the March 2026 release)"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": true,
              "type": "text/html",
              "value": "NVIDIA Display Driver for Linux contains a vulnerability in UVM, where a user could cause improper input validation. A successful exploit of this vulnerability might lead to denial of service."
            }
          ],
          "value": "NVIDIA Display Driver for Linux contains a vulnerability in UVM, where a user could cause improper input validation. A successful exploit of this vulnerability might lead to denial of service."
        }
      ],
      "impacts": [
        {
          "descriptions": [
            {
              "lang": "en",
              "value": "Denial of service"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-20",
              "description": "CWE-20 Improper Input Validation",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-26T17:15:30.817Z",
        "orgId": "9576f279-3576-44b5-a4af-b9a8644b2de6",
        "shortName": "nvidia"
      },
      "references": [
        {
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-24195"
        },
        {
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-24195"
        },
        {
          "url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5821"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "x_generator": {
        "engine": "NVIDIA PSIRT"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9576f279-3576-44b5-a4af-b9a8644b2de6",
    "assignerShortName": "nvidia",
    "cveId": "CVE-2026-24195",
    "datePublished": "2026-05-26T17:15:30.817Z",
    "dateReserved": "2026-01-21T19:09:34.079Z",
    "dateUpdated": "2026-05-26T18:38:21.943Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-24195",
      "date": "2026-10-01",
      "epss": "0.00162",
      "percentile": "0.04891"
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "defaultStatus": "unaffected",
                "platforms": [
                  "Linux(R595 vGPU 20)"
                ],
                "product": "Guest driver",
                "vendor": "NVIDIA",
                "versions": [
                  {
                    "status": "affected",
                    "version": "595.58.03(All versions prior to and including vGPU 20.0)"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "platforms": [
                  "Linux(R580 vGPU 19)"
                ],
                "product": "Guest driver",
                "vendor": "NVIDIA",
                "versions": [
                  {
                    "status": "affected",
                    "version": "580.126.09(All versions prior to and including vGPU 19.4)"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "platforms": [
                  "Linux(Cloud Gaming)"
                ],
                "product": "Guest driver",
                "vendor": "NVIDIA",
                "versions": [
                  {
                    "status": "affected",
                    "version": "595.58.03(All versions up to and including the March 2026 release)"
                  }
                ]
              }
            ],
            "source": "psirt@nvidia.com"
          }
        ],
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:linux:*:*",
                    "matchCriteriaId": "3680577D-C135-46DA-BB23-F99CB82DB9D0",
                    "versionEndExcluding": "535.309.01",
                    "versionStartIncluding": "535",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:windows:*:*",
                    "matchCriteriaId": "01AD77B0-96FD-4885-86DD-EBBD602A69CA",
                    "versionEndExcluding": "539.72",
                    "versionStartIncluding": "535",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:linux:*:*",
                    "matchCriteriaId": "91CBB365-5B39-47B3-98AF-2DD11F3D6FA8",
                    "versionEndExcluding": "580.159.03",
                    "versionStartIncluding": "580",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:windows:*:*",
                    "matchCriteriaId": "433A7815-21F9-430A-8935-148EE26008BA",
                    "versionEndExcluding": "582.53",
                    "versionStartIncluding": "580",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:windows:*:*",
                    "matchCriteriaId": "813855BE-3C8C-4428-A75D-402281EDAAFA",
                    "versionEndExcluding": "595.36",
                    "versionStartIncluding": "595",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:linux:*:*",
                    "matchCriteriaId": "AFD145D7-0473-4AD3-9295-02F20621DAD9",
                    "versionEndExcluding": "595.71.05",
                    "versionStartIncluding": "595",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "NVIDIA Display Driver for Linux contains a vulnerability in UVM, where a user could cause improper input validation. A successful exploit of this vulnerability might lead to denial of service."
          },
          {
            "lang": "es",
            "value": "El controlador de pantalla NVIDIA para Linux contiene una vulnerabilidad en UVM, donde un usuario podr\u00eda causar una validaci\u00f3n de entrada incorrecta. Un exploit exitoso de esta vulnerabilidad podr\u00eda llevar a una denegaci\u00f3n de servicio."
          }
        ],
        "id": "CVE-2026-24195",
        "lastModified": "2026-07-24T11:10:00.170",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 7.1,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "NONE",
                "integrityImpact": "NONE",
                "privilegesRequired": "NONE",
                "scope": "CHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 2.5,
              "impactScore": 4.0,
              "source": "psirt@nvidia.com",
              "type": "Secondary"
            },
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 5.5,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "NONE",
                "integrityImpact": "NONE",
                "privilegesRequired": "LOW",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 1.8,
              "impactScore": 3.6,
              "source": "nvd@nist.gov",
              "type": "Primary"
            }
          ],
          "ssvcV203": [
            {
              "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "ssvcData": {
                "id": "CVE-2026-24195",
                "options": [
                  {
                    "exploitation": "none"
                  },
                  {
                    "automatable": "no"
                  },
                  {
                    "technicalImpact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-26T18:27:42.793026Z",
                "version": "2.0.3"
              }
            }
          ]
        },
        "published": "2026-05-26T18:16:38.490",
        "references": [
          {
            "source": "psirt@nvidia.com",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-24195"
          },
          {
            "source": "psirt@nvidia.com",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5821"
          },
          {
            "source": "psirt@nvidia.com",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "https://www.cve.org/CVERecord?id=CVE-2026-24195"
          }
        ],
        "sourceIdentifier": "psirt@nvidia.com",
        "vulnStatus": "Analyzed",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-20"
              }
            ],
            "source": "psirt@nvidia.com",
            "type": "Secondary"
          }
        ]
      }
    },
    "redhat_vex": {
      "current_release_date": "2026-06-05T19:15:44+00:00",
      "cve": "CVE-2026-24195",
      "id": "CVE-2026-24195",
      "initial_release_date": "2026-01-01T00:00:00+00:00",
      "product_status:known_not_affected": "1",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "CVE-2026-24195",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-24195.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "important",
      "current_release_date": "2026-06-03T02:27:00Z",
      "cve": "CVE-2026-24195",
      "id": "CVE-2026-24195",
      "initial_release_date": "2026-05-21T02:29:56Z",
      "product_status:known_affected": "141",
      "product_status:recommended": "8",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2026-24195",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-24195.json",
      "version": "5"
    },
    "vulnrichment": {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-24195",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-05-26T18:27:42.793026Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-05-26T18:38:17.306Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "unaffected",
              "platforms": [
                "Linux(R595 vGPU 20)"
              ],
              "product": "Guest driver",
              "vendor": "NVIDIA",
              "versions": [
                {
                  "status": "affected",
                  "version": "595.58.03(All versions prior to and including vGPU 20.0)"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "platforms": [
                "Linux(R580 vGPU 19)"
              ],
              "product": "Guest driver",
              "vendor": "NVIDIA",
              "versions": [
                {
                  "status": "affected",
                  "version": "580.126.09(All versions prior to and including vGPU 19.4)"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "platforms": [
                "Linux(Cloud Gaming)"
              ],
              "product": "Guest driver",
              "vendor": "NVIDIA",
              "versions": [
                {
                  "status": "affected",
                  "version": "595.58.03(All versions up to and including the March 2026 release)"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": true,
                  "type": "text/html",
                  "value": "NVIDIA Display Driver for Linux contains a vulnerability in UVM, where a user could cause improper input validation. A successful exploit of this vulnerability might lead to denial of service."
                }
              ],
              "value": "NVIDIA Display Driver for Linux contains a vulnerability in UVM, where a user could cause improper input validation. A successful exploit of this vulnerability might lead to denial of service."
            }
          ],
          "impacts": [
            {
              "descriptions": [
                {
                  "lang": "en",
                  "value": "Denial of service"
                }
              ]
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 7.1,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "NONE",
                "integrityImpact": "NONE",
                "privilegesRequired": "NONE",
                "scope": "CHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-20",
                  "description": "CWE-20 Improper Input Validation",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-05-26T17:15:30.817Z",
            "orgId": "9576f279-3576-44b5-a4af-b9a8644b2de6",
            "shortName": "nvidia"
          },
          "references": [
            {
              "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-24195"
            },
            {
              "url": "https://www.cve.org/CVERecord?id=CVE-2026-24195"
            },
            {
              "url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5821"
            }
          ],
          "source": {
            "discovery": "UNKNOWN"
          },
          "x_generator": {
            "engine": "NVIDIA PSIRT"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "9576f279-3576-44b5-a4af-b9a8644b2de6",
        "assignerShortName": "nvidia",
        "cveId": "CVE-2026-24195",
        "datePublished": "2026-05-26T17:15:30.817Z",
        "dateReserved": "2026-01-21T19:09:34.079Z",
        "dateUpdated": "2026-05-26T18:38:21.943Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.