Is CVE-2026-24148 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-24148 being exploited in the wild.

How severe is CVE-2026-24148?

High severity, with a CVSS score of 8.3, published 31 March 2026.

Which products and versions are affected?

Nvidia Jetson Linux Prior to 35.6.4, 36.0 prior to 36.5.

Is there a fix for CVE-2026-24148?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-24148 attacked?

It is attacked over the network, in an operating system.

Am I affected by CVE-2026-24148?

Check whether you run Nvidia Jetson Linux at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-24148: NVIDIA Jetson insecure default initialization in system logic

CVE-2026-24148 · Severity: high · CVSS 8.3 · Published 2026-03-31

NVIDIA Jetson devices, which are used for AI and edge computing applications, contain a security flaw in how they start up and initialize system resources. An attacker with low-level access could exploit this to view encrypted sensitive information, modify system data, or cause service disruptions. This issue is particularly impactful for organizations deploying multiple devices that share the same machine identification settings.

Technologies: Nvidia Jetson Linux. Vendors: Nvidia.

Quick answers

Is CVE-2026-24148 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-24148 being exploited in the wild.
How severe is CVE-2026-24148?: High severity, with a CVSS score of 8.3, published 31 March 2026.
Which products and versions are affected?: Nvidia Jetson Linux Prior to 35.6.4, 36.0 prior to 36.5.
Is there a fix for CVE-2026-24148?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-24148 attacked?: It is attacked over the network, in an operating system.
Am I affected by CVE-2026-24148?: Check whether you run Nvidia Jetson Linux at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A vulnerability exists in the system initialization logic of NVIDIA Jetson Linux (JetPack) due to the use of insecure default resource initialization (CWE-1188). An unprivileged attacker with network access can exploit this flaw to compromise the confidentiality and integrity of the system. The impact includes the potential disclosure of encrypted data and data tampering. Notably, the vulnerability can lead to a partial denial of service across multiple devices if they share the same machine ID. Patches are available in Jetson Linux versions 35.6.4 and 36.5.

Affected products

NVIDIA Jetson Xavier Series and Jetson Orin Series (Jetson Linux) Prior to 35.6.4, 36.0 prior to 36.5

Timeline

2026-03-31: disclosed
2026-03-31: advisory

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.