HIGHCVE-2026-24154Published Modified CNA nvidia
CVE-2026-24154: NVIDIA Jetson Linux has vulnerability in initrd, where an unprivileged attacker with physical access coul inject incorrect command line arguments
NVIDIA Jetson Linux has vulnerability in initrd, where an unprivileged attacker with physical access coul inject incorrect command line arguments. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, denial of service, data tampering, and information disclosure.
Metrics
- CVSS v3.1
- 7.6
- Severity
- HIGH
- Fixed in
- —
- Affected Products
- 3
Affected packages
- NVIDIA / Jetson Xavier Series, Jetson Orin Series and Jetson ThorAll versions prior to 35.6.4
- NVIDIA / Jetson Xavier Series, Jetson Orin Series and Jetson ThorAll versions prior to 36.5
- NVIDIA / Jetson Xavier Series, Jetson Orin Series and Jetson Thor38.2
CVSS Vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:HReferences