CVE-2026-24153
Quick assessment
Affected
NVIDIA Jetson Xavier Series, Jetson Orin Series and Jetson Thor
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
NVIDIA Jetson Linux是美国英伟达（NVIDIA）公司的一个边缘AI和机器人开发平台。 NVIDIA Jetson Linux存在安全漏洞，该漏洞源于initrd中未禁用nvluks可信应用程序，可能导致信息泄露。
Possible ATT&CK Techniques 1 AI
T1005 · Data from Local System
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-24153
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
NVIDIA Jetson Linux has a vulnerability in initrd, where the nvluks trusted application is not disabled. A successful exploit of this vulnerability might lead to information disclosure.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
违背信任边界
Source: CVE Program / CVE List V5
Vulnerability Title
NVIDIA Jetson Linux 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
NVIDIA Jetson Linux是美国英伟达（NVIDIA）公司的一个边缘AI和机器人开发平台。 NVIDIA Jetson Linux存在安全漏洞，该漏洞源于initrd中未禁用nvluks可信应用程序，可能导致信息泄露。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| NVIDIA | Jetson Xavier Series, Jetson Orin Series and Jetson Thor | All versions prior to 35.6.4 | - |
|
| NVIDIA | Jetson Xavier Series, Jetson Orin Series and Jetson Thor | All versions prior to 36.5 | - |
|
| NVIDIA | Jetson Xavier Series, Jetson Orin Series and Jetson Thor | 38.2 | - |
|
II. Public POCs for CVE-2026-24153
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-24153
请登录查看更多情报信息。
Vendor Pages for CVE-2026-24153 (1)
Same Patch Batch · NVIDIA · 2026-03-31 · 5 CVEs total
| CVE-2026-24164 | 8.8 HIGH | NVIDIA BioNeMo 代码问题漏洞 |
| CVE-2026-24148 | 8.3 HIGH | NVIDIA Jetson for JetPack 安全漏洞 |
| CVE-2026-24165 | 7.8 HIGH | NVIDIA BioNeMo 代码问题漏洞 |
| CVE-2026-24154 | 7.6 HIGH | NVIDIA Jetson Linux 操作系统命令注入漏洞 |
IV. Related Vulnerabilities
Same weakness: CWE-501
-
CVE-2026-62146
Cri-o: cri-o: sandbox state poisoning via pod annotations ma -
CVE-2026-44091
Creation of a new configuration by posting a malicious ID to -
CVE-2026-65902
DOMPurify before 3.4.7 Hook Mutation Pollution via allowedTa -
CVE-2026-33828
Windows Device Health Attestation (DHA) Elevation of Privile -
CVE-2026-25725
Claude Code Has Sandbox Escape via Persistent Configuration
V. Comments for CVE-2026-24153
No comments yet