CVE-2026-24253

NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to denial of service and data tampering.

CVSS v3 8.2 HIGH

8.2^/10

CVSS v3 : HIGH

Vector :

Exploitability : 3.9 / Impact : 4.2

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact LOW

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://github.com/NVIDIA/product-security/tree/main/2026/5842	Product
https://nvd.nist.gov/vuln/detail/CVE-2026-24253	Third Party Advisory US Government Resource
https://www.cve.org/CVERecord?id=CVE-2026-24253	Third Party Advisory

Configurations

Configuration 1 (hide)

AND

cpe:2.3:a:nvidia:dynamo:*:*:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*

History

23 Oct 2026, 21:10

Type	Values Removed	Values Added
Summary		(es) NVIDIA Dynamo para Linux contiene una vulnerabilidad donde un atacante podría causar una escritura fuera de límites. Un exploit exitoso de esta vulnerabilidad podría conducir a denegación de servicio y manipulación de datos.

Information

Published : 2026-08-04 18:16

Updated : 2026-10-24 16:10

NVD link : CVE-2026-24253

Mitre link : CVE-2026-24253

CVE.ORG link : CVE-2026-24253

JSON object : View

Products Affected

linux

linux_kernel

nvidia

dynamo

CWE

CWE-787

Out-of-bounds Write

{"id": "CVE-2026-24253", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-24253", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-08-04T18:22:18.967537Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "psirt@nvidia.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.2, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 4.2, "exploitabilityScore": 3.9}]}, "affected": [{"source": "psirt@nvidia.com", "affectedData": [{"vendor": "NVIDIA", "product": "Dynamo", "versions": [{"status": "affected", "version": "0 to v1.1.0"}], "platforms": ["Linux"], "defaultStatus": "unaffected"}]}], "published": "2026-08-04T18:16:49.767", "references": [{"url": "https://github.com/NVIDIA/product-security/tree/main/2026/5842", "tags": ["Product"], "source": "psirt@nvidia.com"}, {"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-24253", "tags": ["Third Party Advisory", "US Government Resource"], "source": "psirt@nvidia.com"}, {"url": "https://www.cve.org/CVERecord?id=CVE-2026-24253", "tags": ["Third Party Advisory"], "source": "psirt@nvidia.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "psirt@nvidia.com", "description": [{"lang": "en", "value": "CWE-787"}]}], "descriptions": [{"lang": "en", "value": "NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to denial of service and data tampering."}, {"lang": "es", "value": "NVIDIA Dynamo para Linux contiene una vulnerabilidad donde un atacante podr\u00eda causar una escritura fuera de l\u00edmites. Un exploit exitoso de esta vulnerabilidad podr\u00eda conducir a denegaci\u00f3n de servicio y manipulaci\u00f3n de datos."}], "lastModified": "2026-10-24T16:10:00.153", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:nvidia:dynamo:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B5466BE4-35DF-40F0-98BA-8A91AA4B5740", "versionEndIncluding": "1.1.0"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "psirt@nvidia.com"}