Paper/Archive/CVE-2026-24148

CVE-2026-24148

NVIDIA Jetson Xavier Series and Jetson Orin Series — NVIDIA Jetson for JetPack contains a vulnerability in the system initialization logic, where an unprivileged attacker could cause the ini…

EPSS 0.4%CVSS 9.4

critical.is priorityof 100

CVSS 9.4 (NVD)9.4 / 10 × 3028.2 Not in CISA KEV+300.0 EPSS percentile 29.2.292 × 205.8 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

NVIDIA Jetson for JetPack contains a vulnerability in the system initialization logic, where an unprivileged attacker could cause the initialization of a resource with an insecure default. A successful exploit of this vulnerability might lead to information disclosure of encrypted data, data tampering, and partial denial of service across devices sharing the same machine ID.

Affected

ProductAffectedFixed inSource

Jetson Xavier Series and Jetson Orin SeriesAll versions prior to 35.6.4–CNA

Jetson Xavier Series and Jetson Orin SeriesAll versions prior to 36.5–CNA

Scores by source

NVD9.4CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L

nvidia (CNA)8.3CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L

CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refnvd.nist.gov/vuln/detail/CVE-2026-24148 refcve.org/CVERecord?id=CVE-2026-24148 refnvidia.custhelp.com/app/answers/detail/a_id/5797