Jetson Xavier / Orin: Authentication bypass in a network service
CVSS 8.3CVE-2026-24148NVIDIA / GPU stackcurated
Impact
Authentication bypass in a network service
Who can reach it
Network-adjacent unauthenticated
What to do
Flash JetPack; edge fleet
References
Related entries
- Jetson Xavier / Orin: Info disclosure via side channelCVE-2025-23269 · Jetson Xavier / OrinMedium
- NVIDIA DGX A100 - SBIOS / SMM firmware: The BiosCfgTool reads and writes outside its bounds in SMRAM, handingCVE-2022-28200 · NVIDIA DGX A100 - SBIOS / SMM firmwareHigh
- NVIDIA DGX A100 - SBIOS / SMM firmware: An uninitialised pointer in the Ofbd SMM handler gives a privileged local userCVE-2022-31599 · NVIDIA DGX A100 - SBIOS / SMM firmwareHigh
- GeForce Experience installer: Local privesc via untrusted search pathCVE-2022-42291 · GeForce Experience installerHigh
- NVIDIA DGX-1 - SBIOS / SMM firmware: The Uncore PEI module never authenticates the code executed by SSA, soCVE-2023-0209 · NVIDIA DGX-1 - SBIOS / SMM firmwareHigh
- GPU Display Driver (Windows): Arbitrary write to privileged locations via reparse pointsCVE-2023-31017 · GPU Display Driver (Windows)High
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.