CVE-2026-24249

תיאור (מקור, אנגלית)

NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, and information disclosure.

מדדים

CVSS 3.1

7.8 (HIGH) מקור הציון: CNA CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS — סבירות ניצול

0% (אחוזון 000) נכון ל-15/8/2026

CWE

CWE-94

מוצרים מושפעים

nvidia: nemo megatron bridge; linux: linux kernel

קישורים

• https://github.com/NVIDIA/product-security/tree/main/2026/5841 Product
• https://nvd.nist.gov/vuln/detail/CVE-2026-24249 Third Party AdvisoryUS Government Resource
• https://www.cve.org/CVERecord?id=CVE-2026-24249 Third Party Advisory