CVE-2026-24183

NVIDIA Cumulus Linux contains a vulnerability in the user management component, where an unprivileged user could use improper privilege management on the system. A successful exploit of this vulnerability might lead to escalation of privileges.

CVSS v3 7.8 HIGH

7.8^/10

CVSS v3 : HIGH

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://github.com/NVIDIA/product-security/tree/main/2026/5817	Patch
https://nvd.nist.gov/vuln/detail/CVE-2026-24183	US Government Resource
https://www.cve.org/CVERecord?id=CVE-2026-24183	Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:o:nvidia:cumulus_linux:5.15.0:*:*:*:*:*:*:*

History

22 Oct 2026, 22:10

Type	Values Removed	Values Added
Summary		(es) NVIDIA Cumulus Linux contiene una vulnerabilidad en el componente de gestión de usuarios, donde un usuario sin privilegios podría usar una gestión de privilegios inadecuada en el sistema. Un exploit exitoso de esta vulnerabilidad podría llevar a una escalada de privilegios.

Information

Published : 2026-08-18 19:16

Updated : 2026-10-22 22:10

NVD link : CVE-2026-24183

Mitre link : CVE-2026-24183

CVE.ORG link : CVE-2026-24183

JSON object : View

Products Affected

nvidia

cumulus_linux

CWE

CWE-250

Execution with Unnecessary Privileges

{"id": "CVE-2026-24183", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-24183", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-08-18T18:30:57.740748Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "psirt@nvidia.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}]}, "affected": [{"source": "psirt@nvidia.com", "affectedData": [{"vendor": "NVIDIA", "product": "Cumulus Linux GA", "versions": [{"status": "affected", "version": "5.15"}], "platforms": ["Cumulus Linux"], "defaultStatus": "unaffected"}]}], "published": "2026-08-18T19:16:45.520", "references": [{"url": "https://github.com/NVIDIA/product-security/tree/main/2026/5817", "tags": ["Patch"], "source": "psirt@nvidia.com"}, {"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-24183", "tags": ["US Government Resource"], "source": "psirt@nvidia.com"}, {"url": "https://www.cve.org/CVERecord?id=CVE-2026-24183", "tags": ["Third Party Advisory"], "source": "psirt@nvidia.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "psirt@nvidia.com", "description": [{"lang": "en", "value": "CWE-250"}]}], "descriptions": [{"lang": "en", "value": "NVIDIA Cumulus Linux contains a vulnerability in the user management component, where an unprivileged user could use improper privilege management on the system. A successful exploit of this vulnerability might lead to escalation of privileges."}, {"lang": "es", "value": "NVIDIA Cumulus Linux contiene una vulnerabilidad en el componente de gesti\u00f3n de usuarios, donde un usuario sin privilegios podr\u00eda usar una gesti\u00f3n de privilegios inadecuada en el sistema. Un exploit exitoso de esta vulnerabilidad podr\u00eda llevar a una escalada de privilegios."}], "lastModified": "2026-10-22T22:10:00.250", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:nvidia:cumulus_linux:5.15.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8578D3E7-A98C-43F6-BCB3-55B9CF5F0920"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@nvidia.com"}