What’s Vulnerable › Vulnerabilities

CVE-2026-24184

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-08-18 · updated 2026-09-02
• Weakness: CWE-120

Description

NVIDIA Cumulus Linux contains a vulnerability in the Link Layer Discovery Protocol (LLDP) daemon component, where an unauthenticated attacker on an adjacent network could cause buffer overflow by sending crafted LLDP frames. A successful exploit of this vulnerability might lead to code execution.

Affected products

• NVIDIA Cumulus Linux GA: through 5.11.5; through 5.16.0

References

• https://github.com/NVIDIA/product-security/tree/main/2026/5817
• https://nvd.nist.gov/vuln/detail/CVE-2026-24184
• https://www.cve.org/CVERecord?id=CVE-2026-24184

Get alerted when CVE-2026-24184 or the next vulnerability affects your stack