CVE-2026-24197: NVIDIA GPU Display Driver

Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days.

NVIDIA Display Driver for Linux contains a vulnerability in the Multi-Instance GPU (MIG) partition management, where an insecure default initialization of memory subsystem routing resources could lead to data corruption or a hang during partition reconfiguration. A successful exploit of this vulnerability might lead to denial of service.

Affected products

• NVIDIA GPU Display Driver: from 535, before 535.309.01 (fixed in 535.309.01); from 535, before 539.72 (fixed in 539.72); from 580, before 580.159.03 (fixed in 580.159.03); from 580, before 582.53 (fixed in 582.53); from 595, before 595.36 (fixed in 595.36); from 595, before 595.71.05 (fixed in 595.71.05)

Published 2026-05-26. Last modified 2026-07-24.