CVE-2026-24154

Estado: AnalizadaMedia (6.8)—
NVIDIA Jetson Linux has vulnerability in initrd, where an unprivileged attacker with physical access coul inject incorrect command line arguments. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, denial of service, data tampering, and information disclosure.
CVSS

Versión: 3.1
Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Puntuación base: 6.8
Probabilidad de explotación (EPSS)

Probabilidad de explotación en los próximos 30 días: 0.26%
Percentil entre todas las CVEs puntuadas: 16
Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)

Nvidia — Jetson Linux
CWE

CWE-78
Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2026-24154",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2026-24154",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2026-03-31T17:46:16.608804Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "psirt@nvidia.com",
        "cvssData": {
          "scope": "CHANGED",
          "version": "3.1",
          "baseScore": 7.6,
          "attackVector": "PHYSICAL",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 6,
        "exploitabilityScore": 0.9
      },
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 6.8,
          "attackVector": "PHYSICAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 0.9
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@nvidia.com",
      "affectedData": [
        {
          "vendor": "NVIDIA",
          "product": "Jetson Xavier Series, Jetson Orin Series and Jetson Thor",
          "versions": [
            {
              "status": "affected",
              "version": "All versions prior to 35.6.4"
            }
          ],
          "platforms": [
            "Jetson Linux(35)"
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "NVIDIA",
          "product": "Jetson Xavier Series, Jetson Orin Series and Jetson Thor",
          "versions": [
            {
              "status": "affected",
              "version": "All versions prior to 36.5"
            }
          ],
          "platforms": [
            "Jetson Linux(36)"
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "NVIDIA",
          "product": "Jetson Xavier Series, Jetson Orin Series and Jetson Thor",
          "versions": [
            {
              "status": "affected",
              "version": "38.2"
            }
          ],
          "platforms": [
            "Jetson Linux(38)"
          ],
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2026-03-31T17:16:30.680",
  "references": [
    {
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-24154",
      "tags": [
        "Third Party Advisory",
        "US Government Resource"
      ],
      "source": "psirt@nvidia.com"
    },
    {
      "url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5797",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@nvidia.com"
    },
    {
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-24154",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "psirt@nvidia.com"
    }
  ],
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "psirt@nvidia.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-78"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "NVIDIA Jetson Linux has vulnerability in initrd, where an unprivileged attacker with physical access coul inject incorrect command line arguments. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, denial of service, data tampering, and information disclosure."
    },
    {
      "lang": "es",
      "value": "NVIDIA Jetson Linux tiene una vulnerabilidad en initrd, donde un atacante no privilegiado con acceso físico podría inyectar argumentos de línea de comandos incorrectos. Un exploit exitoso de esta vulnerabilidad podría conducir a la ejecución de código, escalada de privilegios, denegación de servicio, manipulación de datos y revelación de información."
    }
  ],
  "lastModified": "2026-07-24T20:10:00.147",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:nvidia:jetson_linux:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B73BF007-6D88-4803-B94B-647CCEC5E291",
              "versionEndExcluding": "35.6.4"
            },
            {
              "criteria": "cpe:2.3:o:nvidia:jetson_linux:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "23FF116C-64BD-4F4D-960F-92A289CB8150",
              "versionEndExcluding": "36.5",
              "versionStartIncluding": "36.0"
            },
            {
              "criteria": "cpe:2.3:o:nvidia:jetson_linux:38.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1FAEFF9B-826E-43AA-A67E-AB89871ED945"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:nvidia:jetson_agx_orin_32gb:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "D196FDF9-FC0F-4411-826D-5A7416F26159"
            },
            {
              "criteria": "cpe:2.3:h:nvidia:jetson_agx_orin_64gb:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "2392844C-6B11-41EA-A280-3AF1BDB77DC2"
            },
            {
              "criteria": "cpe:2.3:h:nvidia:jetson_agx_orin_developer_kit:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "8A7F9D64-EA34-4309-8B2B-293346BD6D25"
            },
            {
              "criteria": "cpe:2.3:h:nvidia:jetson_agx_orin_industrial:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "211E860F-BEFF-4407-967B-3C1332268D8E"
            },
            {
              "criteria": "cpe:2.3:h:nvidia:jetson_agx_thor_developer_kit:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "CFEAFC57-D875-43A7-806F-6F4F07F473C8"
            },
            {
              "criteria": "cpe:2.3:h:nvidia:jetson_agx_xavier_32gb:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "4F92D471-8E65-41FC-A5DE-255136F6F989"
            },
            {
              "criteria": "cpe:2.3:h:nvidia:jetson_agx_xavier_64gb:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "B51F666B-F3ED-4CF3-B48E-B39BDE1C2579"
            },
            {
              "criteria": "cpe:2.3:h:nvidia:jetson_agx_xavier_industrial:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "3C7C6B22-EBD3-4465-9852-4A4844AA714A"
            },
            {
              "criteria": "cpe:2.3:h:nvidia:jetson_orin_nano_4gb:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "80DA8F1E-9ED6-476A-9C9F-3DC231E5142D"
            },
            {
              "criteria": "cpe:2.3:h:nvidia:jetson_orin_nano_8gb:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "DD549248-1C2C-4A0C-9822-691F3D77AEB1"
            },
            {
              "criteria": "cpe:2.3:h:nvidia:jetson_orin_nano_super_developer_kit:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "6F4ECB54-9725-4BFA-A9E7-2F24EAE5BDAB"
            },
            {
              "criteria": "cpe:2.3:h:nvidia:jetson_orin_nx_16gb:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "6D96D5C9-4F9F-4487-90B9-0D8D473D4C6B"
            },
            {
              "criteria": "cpe:2.3:h:nvidia:jetson_orin_nx_8gb:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "E3CF8EB6-767C-43F8-A327-A2D4A91A7CF1"
            },
            {
              "criteria": "cpe:2.3:h:nvidia:jetson_t4000:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "6DDF9FD4-4FE1-4523-BDD6-BEF82B4FFD73"
            },
            {
              "criteria": "cpe:2.3:h:nvidia:jetson_t5000:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "ADCF7D93-C341-4ED4-86CC-2BB7FF31F620"
            },
            {
              "criteria": "cpe:2.3:h:nvidia:jetson_xavier_nx_16gb:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "A36028A3-EE83-4158-9039-5C6C795FA048"
            },
            {
              "criteria": "cpe:2.3:h:nvidia:jetson_xavier_nx_8gb:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "22852BE0-B587-48B4-A7B6-6496715C32EF"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "psirt@nvidia.com"
}