CVE-2026-24183

{
  "id": "CVE-2026-24183",
  "sourceIdentifier": "[email protected]",
  "published": "2026-08-18T19:16:45.520",
  "lastModified": "2026-10-22T22:10:00.250",
  "vulnStatus": "Analyzed",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "NVIDIA Cumulus Linux contains a vulnerability in the user management component, where an unprivileged user could use improper privilege management on the system. A successful exploit of this vulnerability might lead to escalation of privileges."
    },
    {
      "lang": "es",
      "value": "NVIDIA Cumulus Linux contiene una vulnerabilidad en el componente de gestión de usuarios, donde un usuario sin privilegios podría usar una gestión de privilegios inadecuada en el sistema. Un exploit exitoso de esta vulnerabilidad podría llevar a una escalada de privilegios."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "NVIDIA",
          "product": "Cumulus Linux GA",
          "defaultStatus": "unaffected",
          "platforms": [
            "Cumulus Linux"
          ],
          "versions": [
            {
              "version": "5.15",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "baseScore": 7.8,
          "baseSeverity": "HIGH",
          "attackVector": "LOCAL",
          "attackComplexity": "LOW",
          "privilegesRequired": "LOW",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "availabilityImpact": "HIGH"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 5.9
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-08-18T18:30:57.740748Z",
          "id": "CVE-2026-24183",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Primary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-250"
        }
      ]
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:nvidia:cumulus_linux:5.15.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "8578D3E7-A98C-43F6-BCB3-55B9CF5F0920"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://github.com/NVIDIA/product-security/tree/main/2026/5817",
      "source": "[email protected]",
      "tags": [
        "Patch"
      ]
    },
    {
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-24183",
      "source": "[email protected]",
      "tags": [
        "US Government Resource"
      ]
    },
    {
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-24183",
      "source": "[email protected]",
      "tags": [
        "Third Party Advisory"
      ]
    }
  ]
}