CVE-2026-24184: Buffer Overflow
NVIDIA Cumulus Linux contains a vulnerability in the Link Layer Discovery Protocol (LLDP) daemon component, where an unauthenticated attacker on an adjacent network could cause buffer overflow by sending crafted LLDP frames. A successful exploit of this vulnerability might lead to code execution.
Affected Software
Event History
Frequently Asked Questions
Which systems are realistically exposed?
Systems running NVIDIA Cumulus Linux with the LLDP daemon reachable on a network segment shared with an attacker are exposed. Exploitation requires adjacency to the target at the link layer; it is not described as remotely exploitable across routed networks.
What does an attacker need to exploit this issue?
An attacker does not need authentication, privileges, or user interaction. They must be able to send crafted LLDP frames from an adjacent network.
What information is available for patching, mitigation, or determining whether a deployment is affected?
The provided information does not identify affected versions, fixed versions, default LLDP configuration, mitigations, or detection indicators. Use the vendor security advisory referenced in the record to determine remediation and exposure for specific deployments.