GPU Display Driver / GPU firmware: Local privesc via improper GPU firmware parameter validation

CVSS 7.8CVE-2026-24194NVIDIA / GPU stackcurated

Impact

Local privesc via improper GPU firmware parameter validation

Who can reach it

Any tenant with a container

What to do

Driver + GPU firmware upgrade; drain + reboot node

References

https://nvd.nist.gov/vuln/detail/CVE-2026-24194 https://github.com/NVIDIA/product-security/tree/main/2026/5821

Related entries

BioNeMo Framework: RCE via insecure deserialization on model loadCVE-2026-24216 · BioNeMo FrameworkHigh
NVTabular: RCE via unsafe pickle deserializationCVE-2026-24221 · NVTabularHigh
NeMo Framework: RCE via unsafe object deserializationCVE-2026-24228 · NeMo FrameworkHigh
NVTabular: RCE via insecure deserialization in data processingCVE-2026-24237 · NVTabularHigh
TensorRT: Info disclosure / code exec (OOB read in tensor parsing)CVE-2026-24238 · TensorRTHigh
Megatron-Bridge: RCE via unsafe deserialization of untrusted model and config artifactsCVE-2026-24240 · Megatron-BridgeHigh

All NVIDIA / GPU stack entries

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.