NVIDIA Display Driver for Linux contains a vulnerability in a kernel module, where a user could cause a race condition by reordering compiler or processor memory instructions. A successful exploit of this vulnerability might lead to denial of service.

The NVIDIA GPU display driver software on the remote host is missing a security update. It is, therefore, affected by the following vulnerabilities:

  - A vulnerability exists where an attacker could cause a use-after-free, potentially leading to denial of   service, escalation of privileges, information disclosure, data tampering, and code execution.   (CVE-2026-24187)

  - A vulnerability exists in the kernel mode layer, where an attacker could leverage improper access to GPU   resources, potentially leading to code execution, denial of service, escalation of privileges, information   disclosure, or data tampering. (CVE-2026-24190)

  - A vulnerability exists where an attacker could cause an incorrect conversion between numeric types, leading   to a heap buffer overflow. Successful exploit of this vulnerability could potentially lead to denial of   service, escalation of privileges, information disclosure, data tampering, and code execution. (CVE-2026-24192)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

A display driver installed on the remote Windows host is affected by multiple vulnerabilities:

  - A vulnerability exists in the kernel mode layer, where an attacker could leverage improper access to GPU   resources, potentially leading to code execution, denial of service, escalation of privileges, information   disclosure, or data tampering. (CVE-2026-24190)

  - A vulnerability exists where an attacker could cause a time-of-check time-of-use issue, potentially leading   to denial of service, escalation of privileges, information disclosure, data tampering, and code execution.   (CVE-2026-24191)

  - A vulnerability exists where an attacker could cause an out-of-bounds write, potentially leading to denial   of service, escalation of privileges, information disclosure, data tampering, and code execution.   (CVE-2026-24193)

Note that Nessus has not attempted to exploit these issues but has instead relied only on the driver's self-reported version number.

The NVIDIA Virtual GPU Manager software on the remote host is missing a security update. It is, therefore, affected by multiple vulnerabilities, including the following:

  - A vulnerability exists where an attacker could leak held driver locks, potentially leading to denial of   service. (CVE-2026-24182, CVE-2026-24199)

  - A vulnerability exists where an attacker could cause a use-after-free, potentially leading to denial of   service, escalation of privileges, information disclosure, data tampering, and code execution.   (CVE-2026-24187)

  - A vulnerability exists where an attacker could cause an incorrect conversion between numeric types, leading   to a heap buffer overflow. Successful exploit of this vulnerability could potentially lead to denial of   service, escalation of privileges, information disclosure, data tampering, and code execution. (CVE-2026-24192)

  - A vulnerability exists in Multi-Instance GPU (MIG) partition management, where an insecure default   initialization of memory subsystem routing resources could lead to data corruption or a hang during partition   reconfiguration. Successful exploit of this vulnerability could potentially lead to denial of service.   (CVE-2026-24197)

  - A vulnerability exists in the virtual GPU manager, where an attacker could cause a use-after-free for stack   memory, potentially leading to denial of service, escalation of privileges, information disclosure, data   tampering, and code execution. (CVE-2026-24200)

  - A vulnerability exists in the virtual GPU manager, where an attacker could cause an out-of-bounds access,   potentially leading to data tampering, denial of service, or information disclosure. (CVE-2026-24201)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
316514	NVIDIA Linux GPU Display Driver (May 2026)	Nessus	Misc.	high
316513	NVIDIA Windows GPU Display Driver (May 2026)	Nessus	Windows	high
316512	NVIDIA Virtual GPU Manager Multiple Vulnerabilities (May 2026)	Nessus	Misc.	high

Detections

Analytics

CVE-2026-24199

medium

Tenable Plugins

high

high

high