CVE-2026-24198: 
NVIDIA Graphics Driver vulnerability analysis and mitigation

CVE-2026-24198 is a race condition vulnerability in the NVIDIA GPU Display Driver for Linux that enables an advanced local attacker with high privileges to leak sensitive memory contents. The flaw affects NVIDIA GeForce, Tesla, RTX, Quadro, and NVS product lines — specifically all driver versions prior to 580.159.03 (GeForce/Tesla/RTX/Quadro/NVS on one branch) and prior to 595.71.05 (on another branch). It was published on May 26, 2026, by NVIDIA Corporation. The CVSS v3.1 base score is 5.6 (Medium), assigned by NVIDIA (Github Advisory, Feedly).

The vulnerability is classified under CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor) and stems from a race condition in the Linux GPU display driver that can be triggered by a local attacker with high-privilege access (Github Advisory). By exploiting timing conditions in the driver's memory handling routines, an attacker can cause sensitive memory contents to be exposed before proper access controls are enforced. The attack vector is local (AV:L), requires no user interaction, and has low attack complexity once the attacker holds high privileges on the system. No public proof-of-concept code or detailed technical write-up has been identified at this time (Feedly).

Successful exploitation can result in limited disclosure of sensitive information from GPU driver memory, data tampering, and denial of service (driver crash). The confidentiality and integrity impacts are rated low, while availability impact is rated high, indicating the most likely outcome is a driver service disruption alongside potential memory leakage. The scope is unchanged, meaning the impact is confined to the vulnerable component itself without privilege escalation to other system components (Github Advisory, Feedly).

There is no known public proof-of-concept exploit and no evidence of in-the-wild exploitation at this time (Feedly). The EPSS score is approximately 0.011–0.014%, placing it in the 3rd percentile for exploitation likelihood within 30 days (Github Advisory). The vulnerability is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog. Exploitation requires local access with high privileges, which significantly limits the attacker pool and reduces practical risk for most deployments.

NVIDIA has released patched driver versions addressing this vulnerability. Affected users should upgrade to driver version 580.159.03 or later for GeForce, Tesla, RTX, Quadro, and NVS product lines on one branch, or 595.71.05 or later on the other branch (Feedly). As a compensating control, restrict local access and high-privilege permissions on systems running NVIDIA GPU drivers to trusted users only. Monitor GPU driver processes for unexpected behavior or anomalous memory access patterns. SUSE has also issued a security update (SUSE-SU-202621878-1) and Amazon Linux 2023 has published an advisory (ALAS2023NVIDIA-2026-292) for affected packages (Feedly).

Gaming on Linux covered the disclosure as part of NVIDIA's broader May 2026 security advisory, which addressed 14 vulnerabilities across Windows and Linux drivers (Feedly). IRC-Junkie and other tech outlets reported on the batch fix. SUSE and Red Hat both issued downstream advisories, and Amazon Linux published a corresponding security update, indicating broad ecosystem acknowledgment. No notable individual researcher commentary or significant social media discussion has been identified beyond standard vulnerability tracking coverage.