NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure, data tampering, and code execution.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023NVIDIA-2026-280 advisory.

    NVIDIA Display Driver for Windows and Linux contains a vulnerability in the kernel driver, where a user     could cause an incorrect permission assignment for a critical resource. A successful exploit of this     vulnerability might lead to data tampering and denial of service. (CVE-2025-33221)

    NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker could leak held     driver locks. A successful exploit of this vulnerability might lead to denial of service. (CVE-2026-24182)

    NVIDIA Display Driver for Linux contains a vulnerability where an attacker could cause a use-after-free. A     successful exploit of this vulnerability might lead to denial of service, escalation of privileges,     information disclosure, data tampering, and code execution. (CVE-2026-24187)

    NVIDIA Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a     user could cause improper access to GPU resources. A successful exploit of this vulnerability might lead     to denial of service, escalation of privileges, information disclosure, data tampering, and code     execution. (CVE-2026-24190)

    NVIDIA Display Driver for Linux contains a vulnerability where an attacker could cause an incorrect     conversion between numeric types, leading to a heap buffer overflow. A successful exploit of this     vulnerability might lead to denial of service, escalation of privileges, information disclosure, data     tampering, and code execution. (CVE-2026-24192)

    NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker could cause an out-     of-bounds write. A successful exploit of this vulnerability might lead to denial of service, escalation of     privileges, information disclosure, data tampering, and code execution. (CVE-2026-24193)

    NVIDIA Display Driver for Linux contains a vulnerability in a kernel mode layer handler, where a user     could cause improper permission handling. A successful exploit of this vulnerability might lead to denial     of service, escalation of privileges, information disclosure, data tampering, and code execution.
    (CVE-2026-24194)

    NVIDIA Display Driver for Linux contains a vulnerability in UVM, where a user could cause improper input     validation. A successful exploit of this vulnerability might lead to denial of service. (CVE-2026-24195)

    NVIDIA Display Driver for Linux contains a vulnerability where a user could cause an out-of-bounds read. A     successful exploit of this vulnerability might lead to denial of service and information disclosure.
    (CVE-2026-24196)

    NVIDIA Display Driver for Linux contains a vulnerability in the Multi-Instance GPU (MIG) partition     management, where an insecure default initialization of memory subsystem routing resources could lead to     data corruption or a hang during partition reconfiguration. A successful exploit of this vulnerability     might lead to denial of service. (CVE-2026-24197)

    NVIDIA GPU Display Driver for Linux  contains a vulnerability where an advanced attacker could use a race     condition to leak sensitive memory, which might cause limited exposure of sensitive information to an     unauthorized actor. A successful exploit of this vulnerability might lead to denial of service, data     tampering, and information disclosure. (CVE-2026-24198)

    NVIDIA Display Driver for Linux contains a vulnerability in a kernel module, where a user could cause a     race condition by reordering compiler or processor memory instructions. A successful exploit of this     vulnerability might lead to denial of service. (CVE-2026-24199)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker could cause an out-     of-bounds write. A successful exploit of this vulnerability might lead to denial of service, escalation of     privileges, information disclosure, data tampering, and code execution. (CVE-2026-24193)

Note that Nessus relies on the presence of the package as reported by the vendor.

The NVIDIA GPU display driver software on the remote host is missing a security update. It is, therefore, affected by the following vulnerabilities:

  - A vulnerability exists where an attacker could cause a use-after-free, potentially leading to denial of   service, escalation of privileges, information disclosure, data tampering, and code execution.   (CVE-2026-24187)

  - A vulnerability exists in the kernel mode layer, where an attacker could leverage improper access to GPU   resources, potentially leading to code execution, denial of service, escalation of privileges, information   disclosure, or data tampering. (CVE-2026-24190)

  - A vulnerability exists where an attacker could cause an incorrect conversion between numeric types, leading   to a heap buffer overflow. Successful exploit of this vulnerability could potentially lead to denial of   service, escalation of privileges, information disclosure, data tampering, and code execution. (CVE-2026-24192)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

A display driver installed on the remote Windows host is affected by multiple vulnerabilities:

  - A vulnerability exists in the kernel mode layer, where an attacker could leverage improper access to GPU   resources, potentially leading to code execution, denial of service, escalation of privileges, information   disclosure, or data tampering. (CVE-2026-24190)

  - A vulnerability exists where an attacker could cause a time-of-check time-of-use issue, potentially leading   to denial of service, escalation of privileges, information disclosure, data tampering, and code execution.   (CVE-2026-24191)

  - A vulnerability exists where an attacker could cause an out-of-bounds write, potentially leading to denial   of service, escalation of privileges, information disclosure, data tampering, and code execution.   (CVE-2026-24193)

Note that Nessus has not attempted to exploit these issues but has instead relied only on the driver's self-reported version number.

ID	Name	Product	Family	Severity
319768	Amazon Linux 2023 : nvlink5 (ALAS2023NVIDIA-2026-280)	Nessus	Amazon Linux Local Security Checks	medium
317325	Linux Distros Unpatched Vulnerability : CVE-2026-24193	Nessus	Misc.	high
316514	NVIDIA Linux GPU Display Driver (May 2026)	Nessus	Misc.	medium
316513	NVIDIA Windows GPU Display Driver (May 2026)	Nessus	Windows	medium

Detections

Analytics

CVE-2026-24193

high

Tenable Plugins

medium

high

medium

medium