CVE-2026-24148: NVIDIA Jetson for JetPack contains a vulnerability in the system initialization logic, where an unprivileged attacker could cause the initialization of a…

PriorityP349critical9.4CVSS 3.1

AVNACLPRNUINSUCHIHAL

EPSS

0.35%

27.0th percentile

NVIDIA Jetson for JetPack contains a vulnerability in the system initialization logic, where an unprivileged attacker could cause the initialization of a resource with an insecure default. A successful exploit of this vulnerability might lead to information disclosure of encrypted data, data tampering, and partial denial of service across devices sharing the same machine ID.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
nvidia	jetson_linux	< 35.6.4	35.6.4
nvidia	jetson_linux	>= 36.0 < 36.5	36.5
nvidia	jetson_xavier_series_and_jetson_orin_series	—	—
nvidia	jetson_xavier_series_and_jetson_orin_series	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.