CVE-2026-24197: Medium severity Nvidia NVIDIA Display Driver for Linux vulnerability
NVIDIA Display Driver for Linux contains a vulnerability in the Multi-Instance GPU (MIG) partition management, where an insecure default initialization of memory subsystem routing resources could lead to data corruption or a hang during partition reconfiguration. A successful exploit of this vulnerability might lead to denial of service.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/nvidia-graphics-drivers-535to a version that resolves this vulnerability.Fixed in 535.309.01-0ubuntu0.22.04.1 - Upgrade
Upgrade
ubuntu/nvidia-graphics-drivers-535-serverto a version that resolves this vulnerability.Fixed in 535.309.01-0ubuntu0.22.04.1 - Upgrade
Upgrade
ubuntu/nvidia-graphics-drivers-580to a version that resolves this vulnerability.Fixed in 580.159.03-0ubuntu0.22.04.1 - Upgrade
Upgrade
ubuntu/nvidia-graphics-drivers-580-serverto a version that resolves this vulnerability.Fixed in 580.159.03-0ubuntu0.22.04.1 - Upgrade
Upgrade
ubuntu/nvidia-graphics-drivers-595to a version that resolves this vulnerability.Fixed in 595.71.05-0ubuntu0.22.04.1 - Upgrade
Upgrade
ubuntu/nvidia-graphics-drivers-595-serverto a version that resolves this vulnerability.Fixed in 595.71.05-0ubuntu0.22.04.1 - Upgrade
Upgrade
ubuntu/nvidia-graphics-drivers-535to a version that resolves this vulnerability.Fixed in 535.309.01-0ubuntu0.24.04.1 - Upgrade
Upgrade
ubuntu/nvidia-graphics-drivers-535-serverto a version that resolves this vulnerability.Fixed in 535.309.01-0ubuntu0.24.04.1 - Upgrade
Upgrade
ubuntu/nvidia-graphics-drivers-580to a version that resolves this vulnerability.Fixed in 580.159.03-0ubuntu0.24.04.1 - Upgrade
Upgrade
ubuntu/nvidia-graphics-drivers-580-serverto a version that resolves this vulnerability.Fixed in 580.159.03-0ubuntu0.24.04.1 - Upgrade
Upgrade
ubuntu/nvidia-graphics-drivers-595to a version that resolves this vulnerability.Fixed in 595.71.05-0ubuntu0.24.04.1 - Upgrade
Upgrade
ubuntu/nvidia-graphics-drivers-595-serverto a version that resolves this vulnerability.Fixed in 595.71.05-0ubuntu0.24.04.1 - Upgrade
Upgrade
ubuntu/nvidia-graphics-drivers-580to a version that resolves this vulnerability.Fixed in 580.159.03-0ubuntu0.25.10.1 - Upgrade
Upgrade
ubuntu/nvidia-graphics-drivers-580-serverto a version that resolves this vulnerability.Fixed in 580.159.03-0ubuntu0.25.10.1 - Upgrade
Upgrade
ubuntu/nvidia-graphics-drivers-595to a version that resolves this vulnerability.Fixed in 595.71.05-0ubuntu0.25.10.1 - Upgrade
Upgrade
ubuntu/nvidia-graphics-drivers-595-serverto a version that resolves this vulnerability.Fixed in 595.71.05-0ubuntu0.25.10.1 - Upgrade
Upgrade
ubuntu/nvidia-graphics-drivers-580to a version that resolves this vulnerability.Fixed in 580.159.03-0ubuntu0.26.04.1 - Upgrade
Upgrade
ubuntu/nvidia-graphics-drivers-580-serverto a version that resolves this vulnerability.Fixed in 580.159.03-0ubuntu0.26.04.1 - Upgrade
Upgrade
ubuntu/nvidia-graphics-drivers-595to a version that resolves this vulnerability.Fixed in 595.71.05-0ubuntu0.26.04.1 - Upgrade
Upgrade
ubuntu/nvidia-graphics-drivers-595-serverto a version that resolves this vulnerability.Fixed in 595.71.05-0ubuntu0.26.04.1
Event History
Frequently Asked Questions
What is the severity of CVE-2026-24197?
CVE-2026-24197 has a medium severity rating of 6.5.
How do I fix CVE-2026-24197?
To fix CVE-2026-24197, update the NVIDIA Display Driver for Linux to the latest version provided by NVIDIA.
What could be the impact of exploiting CVE-2026-24197?
Exploiting CVE-2026-24197 could lead to data corruption or a hang during partition reconfiguration.
Which software is affected by CVE-2026-24197?
CVE-2026-24197 affects the NVIDIA Display Driver for Linux.
What type of vulnerability is CVE-2026-24197?
CVE-2026-24197 is related to insecure default initialization in the Multi-Instance GPU partition management.