CVE-2026-24148

Katalog CVE

CVSS 9.4 · Critical EPSS 0,35%

Kerentanan Initialization of a Resource with an Insecure Default pada nvidia jetson linux. Skor CVSS 3.1 9.4 (Critical) menurut NVD.

Deskripsi (NVD)

NVIDIA Jetson for JetPack contains a vulnerability in the system initialization logic, where an unprivileged attacker could cause the initialization of a resource with an insecure default. A successful exploit of this vulnerability might lead to information disclosure of encrypted data, data tampering, and partial denial of service across devices sharing the same machine ID.

Rincian

Terbit di NVD

31 Maret 2026

Terakhir diubah

24 Juli 2026

Status NVD

Analyzed

CVSS 3.1

9.4 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-1188: Initialization of a Resource with an Insecure Default

EPSS (30 hari)

0,35% peluang dieksploitasi; lebih tinggi dari 26,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://nvidia.custhelp.com/app/answers/detail/a_id/5797 advisory vendor
• https://nvd.nist.gov/vuln/detail/CVE-2026-24148 advisory pihak ketiga · pemerintah AS
• https://www.cve.org/CVERecord?id=CVE-2026-24148 advisory pihak ketiga