Is CVE-2026-24197 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-24197 being exploited in the wild.

How severe is CVE-2026-24197?

Medium severity, with a CVSS score of 6.5, published 26 May 2026.

Is there a fix for CVE-2026-24197?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-24197 attacked?

It is attacked with local access, in an operating system.

Am I affected by CVE-2026-24197?

Check whether you run Nvidia Display Driver for Linux. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-24197: NVIDIA Display Driver for Linux insecure initialization in MIG management

CVE-2026-24197 · Severity: medium · CVSS 6.5 · Published 2026-05-26

A vulnerability exists in the NVIDIA Linux display driver's management of Multi-Instance GPU (MIG) partitions, which are used to divide a single physical GPU into multiple isolated instances. An attacker with local access to the system could trigger a failure during partition reconfiguration, leading to data corruption or a complete system hang. This results in a denial-of-service condition, potentially disrupting critical computing workloads and requiring a system restart.

Technologies: Nvidia Display Driver for Linux. Vendors: Nvidia.

Quick answers

Is CVE-2026-24197 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-24197 being exploited in the wild.
How severe is CVE-2026-24197?: Medium severity, with a CVSS score of 6.5, published 26 May 2026.
Which products and versions are affected?: NVIDIA Display Driver for Linux.
Is there a fix for CVE-2026-24197?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-24197 attacked?: It is attacked with local access, in an operating system.
Am I affected by CVE-2026-24197?: Check whether you run Nvidia Display Driver for Linux. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

This vulnerability (CWE-1188) is caused by insecure default initialization of memory subsystem routing resources within the Multi-Instance GPU (MIG) management component of the NVIDIA Linux driver. A local attacker with low privileges can exploit this flaw during GPU partition reconfiguration. The root cause involves improper setup of memory routing, which can lead to memory corruption or a kernel/system hang. Successful exploitation results in a denial-of-service (DoS) condition. The vulnerability is tracked as CVE-2026-24197 and has a CVSS v3.1 base score of 6.5, reflecting its impact on system availability.

Affected products

NVIDIA Display Driver for Linux

Timeline

2026-05-26: disclosed: Initial disclosure by NVIDIA and NVD publication.

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.