CVE-2026-24183
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk3th percentile - higher than 3% of all known CVEs
Summary
NVIDIA Cumulus Linux contains a vulnerability in the user management component, where an unprivileged user could exploit improper privilege management. Successful exploitation may lead to privilege escalation.
Risk Assessment
The risk is the possibility of a regular user gaining higher privileges, which could compromise system integrity.
Recommendation
It is recommended to review user permissions and update Cumulus Linux to a patched version.
Other vulnerabilities in NVIDIA Cumulus Linux
See all- CVE-2026-24184High
NVIDIA Cumulus Linux contains a vulnerability in the LLDP daemon, where an unauthenticated attacker on an adjacent network could cause a buffer overflow by sending crafted LLDP frames. Successful exploitation may lead to code execution.
- CVE-2025-23261Medium
NVIDIA Cumulus Linux and NVOS products contain a vulnerability where hashed user passwords are not properly suppressed in log files, potentially disclosing information to unauthorized users.
Original NVD description (English source)
NVIDIA Cumulus Linux contains a vulnerability in the user management component, where an unprivileged user could use improper privilege management on the system. A successful exploit of this vulnerability might lead to escalation of privileges.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS