Is CVE-2026-24153 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-24153 being exploited in the wild.

How severe is CVE-2026-24153?

Medium severity, with a CVSS score of 5.2, published 31 March 2026.

Which products and versions are affected?

Nvidia Jetson Linux prior to 35.6.4.

Is there a fix for CVE-2026-24153?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-24153 attacked?

It is attacked with local access or with physical access, in an operating system.

Am I affected by CVE-2026-24153?

Check whether you run Nvidia Jetson Linux at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-24153: NVIDIA Jetson Linux information disclosure in initrd

CVE-2026-24153 · Severity: medium · CVSS 5.2 · Published 2026-03-31

NVIDIA Jetson Linux, an operating system used in embedded AI and robotics platforms, contains a security flaw where a specific trusted application is not properly disabled during the boot process. If exploited, this could allow an unauthorized person with local or physical access to the device to view sensitive information. This could lead to the exposure of proprietary data or system credentials.

Technologies: Nvidia Jetson Linux. Vendors: Nvidia.

Quick answers

Is CVE-2026-24153 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-24153 being exploited in the wild.
How severe is CVE-2026-24153?: Medium severity, with a CVSS score of 5.2, published 31 March 2026.
Which products and versions are affected?: Nvidia Jetson Linux prior to 35.6.4.
Is there a fix for CVE-2026-24153?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-24153 attacked?: It is attacked with local access or with physical access, in an operating system.
Am I affected by CVE-2026-24153?: Check whether you run Nvidia Jetson Linux at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A vulnerability exists in the NVIDIA Jetson Linux initrd (initial RAM disk) component due to a trust boundary violation. Specifically, the 'nvluks' trusted application is not disabled as intended, which can be leveraged by a local attacker with low privileges or an attacker with physical access. Successful exploitation allows for unauthorized information disclosure from the secure environment. The issue affects various Jetson series including Xavier, Orin, and Thor. Patches are available in versions 35.6.4 and 36.5.

Affected products

NVIDIA Jetson Linux (35) prior to 35.6.4
NVIDIA Jetson Linux (36) prior to 36.5
NVIDIA Jetson Linux (38) 38.2

Timeline

2026-03-31: disclosed
2026-03-31: advisory

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.