This vulnerability (CVE-2026-24148) in NVIDIA Jetson Xavier and Orin Series devices arises from the system initialization logic setting a resource with an insecure default configuration. An unprivileged attacker could leverage this flaw to cause information disclosure of encrypted data, tamper with data, and induce partial denial of service on devices sharing the same machine ID. The issue affects all versions prior to 35.6.4. The CVSS 3.1 vector indicates network attack vector, low attack complexity, requiring low privileges but no user interaction, with high confidentiality and integrity impact and low availability impact. No patch or vendor advisory is currently available to confirm remediation status.

The vulnerability allows an unprivileged attacker to cause initialization of a resource with insecure defaults, potentially leading to disclosure of encrypted data, data tampering, and partial denial of service on affected devices. This impacts confidentiality and integrity significantly, with some availability impact. No known exploits are reported in the wild at this time.

Patch status is not yet confirmed — check the NVIDIA vendor advisory for current remediation guidance. Until an official fix is released, users should limit unprivileged access to affected devices and monitor for updates from NVIDIA. No specific mitigations are documented in the provided data.