CVE-2026-24198: nvidia geforce
Vulnerability summary
CVE-2026-24198 is a medium (CVSS 5.6) vulnerability in nvidia geforce. EPSS estimates a 0.15% chance of exploitation in the next 30 days, higher than 4.2% of scored vulnerabilities.
Timeline
- 26-05-2026PublishedVulnerability first disclosed.
- 27-05-2026Last modifiedVulnerability information updated.
Description
NVIDIA GPU Display Driver for Linux contains a vulnerability where an advanced attacker could use a race condition to leak sensitive memory, which might cause limited exposure of sensitive information to an unauthorized actor. A successful exploit of this vulnerability might lead to denial of service, data tampering, and information disclosure.
CVSS metrics
3 scores · 3 sources · 1 version- OSV · UbuntuEcosystem advisory · calculated5.6MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H
- NVDNIST5.6MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H
EPSS trend
Probability
0.15%
Chance of exploitation in the next 30 days
Percentile
4%
Versus all other CVEs
30-day change
0.00 pp
From 0.15% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Ubuntu37 products
- nvidia-graphics-drivers-304All versions (No fix recorded)
- nvidia-graphics-drivers-340All versions (No fix recorded)
- nvidia-graphics-drivers-390All versions (No fix recorded)
- nvidia-graphics-drivers-418-serverAll versions (No fix recorded)
- nvidia-graphics-drivers-430All versions (No fix recorded)
Nvidia3 products
- geforceAll driver versions prior to 595.71.05 | All driver versions prior to 580.159.03
- nvidia rtx, quadro, nvsAll driver versions prior to 595.71.05 | All driver versions prior to 580.159.03
- teslaAll driver versions prior to 595.71.05 | All driver versions prior to 580.159.03
2 vendors · 40 products