CVE-2026-24154
HighCVSS 7.6Exploitation Probability (EPSS)
Low risk17th percentile - higher than 17% of all known CVEs
Summary
NVIDIA Jetson Linux has a vulnerability in initrd where an unprivileged attacker with physical access can inject incorrect command line arguments. Successful exploitation may lead to code execution, privilege escalation, DoS, data tampering, and information disclosure.
Risk Assessment
An attacker with physical access can take control of the Jetson device, potentially leading to full system compromise in production environments.
Recommendation
Apply the NVIDIA Jetson Linux update that includes the fix for initrd.
Other vulnerabilities in NVIDIA Jetson Linux
Original NVD description (English source)
NVIDIA Jetson Linux has vulnerability in initrd, where an unprivileged attacker with physical access coul inject incorrect command line arguments. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, denial of service, data tampering, and information disclosure.