Executive brief
A vulnerability exists in the NVIDIA Linux display driver's management of Multi-Instance GPU (MIG) partitions, which are used to divide a single physical GPU into multiple isolated instances. An attacker with local access to the system could trigger a failure during partition reconfiguration, leading to data corruption or a complete system hang. This results in a denial-of-service condition, potentially disrupting critical computing workloads and requiring a system restart.
Technical details
This vulnerability (CWE-1188) is caused by insecure default initialization of memory subsystem routing resources within the Multi-Instance GPU (MIG) management component of the NVIDIA Linux driver. A local attacker with low privileges can exploit this flaw during GPU partition reconfiguration. The root cause involves improper setup of memory routing, which can lead to memory corruption or a kernel/system hang. Successful exploitation results in a denial-of-service (DoS) condition. The vulnerability is tracked as CVE-2026-24197 and has a CVSS v3.1 base score of 6.5, reflecting its impact on system availability.
Affected products
- NVIDIA Display Driver for Linux
Timeline
- 2026-05-26: disclosed: Initial disclosure by NVIDIA and NVD publication.