CVE-2026-24148

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-24148
NVIDIA Jetson for JetPack contains a vulnerability in the system initialization logic, where an unprivileged attacker could cause the initialization of a resource with an insecure default. A successful exploit of this vulnerability might lead to information disclosure of encrypted data, data tampering, and partial denial of service across devices sharing the same machine ID.

8.3 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 5.5

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact LOW

Scope UNCHANGED

References
Link Resource
https://nvd.nist.gov/vuln/detail/CVE-2026-24148 Third Party Advisory US Government Resource
https://nvidia.custhelp.com/app/answers/detail/a_id/5797 Vendor Advisory
https://www.cve.org/CVERecord?id=CVE-2026-24148 Third Party Advisory
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:o:nvidia:jetson_linux:*:*:*:*:*:*:*:*
cpe:2.3:o:nvidia:jetson_linux:*:*:*:*:*:*:*:*
OR cpe:2.3:h:nvidia:jetson_agx_orin_32gb:-:*:*:*:*:*:*:*
cpe:2.3:h:nvidia:jetson_agx_orin_64gb:-:*:*:*:*:*:*:*
cpe:2.3:h:nvidia:jetson_agx_orin_developer_kit:-:*:*:*:*:*:*:*
cpe:2.3:h:nvidia:jetson_agx_orin_industrial:-:*:*:*:*:*:*:*
cpe:2.3:h:nvidia:jetson_agx_xavier_32gb:-:*:*:*:*:*:*:*
cpe:2.3:h:nvidia:jetson_agx_xavier_64gb:-:*:*:*:*:*:*:*
cpe:2.3:h:nvidia:jetson_agx_xavier_industrial:-:*:*:*:*:*:*:*
cpe:2.3:h:nvidia:jetson_orin_nano_4gb:-:*:*:*:*:*:*:*
cpe:2.3:h:nvidia:jetson_orin_nano_8gb:-:*:*:*:*:*:*:*
cpe:2.3:h:nvidia:jetson_orin_nano_super_developer_kit:-:*:*:*:*:*:*:*
cpe:2.3:h:nvidia:jetson_orin_nx_16gb:-:*:*:*:*:*:*:*
cpe:2.3:h:nvidia:jetson_orin_nx_8gb:-:*:*:*:*:*:*:*
cpe:2.3:h:nvidia:jetson_xavier_nx_16gb:-:*:*:*:*:*:*:*
cpe:2.3:h:nvidia:jetson_xavier_nx_8gb:-:*:*:*:*:*:*:*
History

No history.

Information

Published : 2026-03-31 17:16

Updated : 2026-07-24 20:10

NVD link : CVE-2026-24148

Mitre link : CVE-2026-24148

CVE.ORG link : CVE-2026-24148

JSON object : View

Products Affected

nvidia

  • jetson_agx_orin_32gb
  • jetson_orin_nx_16gb
  • jetson_agx_orin_developer_kit
  • jetson_xavier_nx_16gb
  • jetson_orin_nano_8gb
  • jetson_xavier_nx_8gb
  • jetson_orin_nano_4gb
  • jetson_orin_nx_8gb
  • jetson_agx_xavier_industrial
  • jetson_agx_xavier_32gb
  • jetson_agx_xavier_64gb
  • jetson_linux
  • jetson_agx_orin_64gb
  • jetson_agx_orin_industrial
  • jetson_orin_nano_super_developer_kit
CWE
CWE-1188

Initialization of a Resource with an Insecure Default