Insecure Default Initialization of Resource in NVIDIA vGPU software (Virtual GPU Manager) Driver and NVIDIA Linux GPU Display Driver - CVE-2026-24197

 

Insecure Default Initialization of Resource in NVIDIA vGPU software (Virtual GPU Manager) Driver and NVIDIA Linux GPU Display Driver - CVE-2026-24197

Published: May 19, 2026


Vulnerability identifier: #VU131813
CSH Severity: Low
CVSS v4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-24197
CWE-ID: CWE-1188
Exploitation vector: Local access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a local user to cause a denial of service.

The vulnerability exists due to insecure default initialization in Multi-Instance GPU (MIG) partition management when reconfiguring partitions. A local user can trigger data corruption or a hang during partition reconfiguration to cause a denial of service.

The issue affects memory subsystem routing resources in MIG partition management.


Affected software

NVIDIA vGPU software (Virtual GPU Manager) Driver
NVIDIA Linux GPU Display Driver
SUSE Linux Micro
nvidia-open-driver-G06-signed-cuda-kmp-default
nvidia-open-driver-G06-signed-kmp-default
nvidia-open-driver-G06-signed-cuda-kmp-default-debuginfo
nvidia-open-driver-G06-signed-kmp-default-debuginfo
nvidia-open-driver-G06-signed-cuda-debugsource
nvidia-open-driver-G06-signed-debugsource

How to mitigate CVE-2026-24197

Install security update from vendor's website.

NVIDIA vGPU software (Virtual GPU Manager) Driver - addressed in versions 16.14, 19.5, 20.1
NVIDIA Linux GPU Display Driver - addressed in versions 570.211.01, 580.126.09, 590.48.01
nvidia-open-driver-G06-signed-cuda-kmp-default - update to 580.159.03_k6.4.0_46-1.1
nvidia-open-driver-G06-signed-kmp-default - update to 580.159.03_k6.4.0_46-1.1
nvidia-open-driver-G06-signed-cuda-kmp-default-debuginfo - update to 580.159.03_k6.4.0_46-1.1
nvidia-open-driver-G06-signed-kmp-default-debuginfo - update to 580.159.03_k6.4.0_46-1.1
nvidia-open-driver-G06-signed-cuda-debugsource - update to 580.159.03-1.1
nvidia-open-driver-G06-signed-debugsource - update to 580.159.03-1.1

External References

Related Security Bulletins