CVE-2026-24199: CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') in NVIDIA GeForce
NVIDIA Display Driver for Linux contains a vulnerability in a kernel module, where a user could cause a race condition by reordering compiler or processor memory instructions. A successful exploit of this vulnerability might lead to denial of service.
AI Analysis
Technical Summary
CVE-2026-24199 is a race condition vulnerability in the NVIDIA GeForce Linux display driver kernel module. It arises from improper synchronization when a local user reorders compiler or processor memory instructions, which can cause concurrent execution issues. Exploitation may result in denial of service by disrupting normal driver operation. The vulnerability affects all driver versions prior to 595.71.05. The CVSS 3.1 vector indicates the attack requires local access with high attack complexity and low privileges, does not require user interaction, and impacts availability only.
Potential Impact
Successful exploitation of this race condition can cause denial of service on affected Linux systems running vulnerable NVIDIA GeForce drivers. There is no impact on confidentiality or integrity according to the CVSS vector. No known exploits exist in the wild at this time.
Mitigation Recommendations
Patch status is not yet confirmed — check the NVIDIA vendor advisory for current remediation guidance. Users should monitor NVIDIA's official channels for driver updates addressing this issue. Until a fix is available, limiting local user access and avoiding untrusted code execution on affected systems may reduce risk.
CVE-2026-24199: CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') in NVIDIA GeForce
Description
NVIDIA Display Driver for Linux contains a vulnerability in a kernel module, where a user could cause a race condition by reordering compiler or processor memory instructions. A successful exploit of this vulnerability might lead to denial of service.
CVSS v3.1
Score 4.7medium
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-24199 is a race condition vulnerability in the NVIDIA GeForce Linux display driver kernel module. It arises from improper synchronization when a local user reorders compiler or processor memory instructions, which can cause concurrent execution issues. Exploitation may result in denial of service by disrupting normal driver operation. The vulnerability affects all driver versions prior to 595.71.05. The CVSS 3.1 vector indicates the attack requires local access with high attack complexity and low privileges, does not require user interaction, and impacts availability only.
Potential Impact
Successful exploitation of this race condition can cause denial of service on affected Linux systems running vulnerable NVIDIA GeForce drivers. There is no impact on confidentiality or integrity according to the CVSS vector. No known exploits exist in the wild at this time.
Mitigation Recommendations
Patch status is not yet confirmed — check the NVIDIA vendor advisory for current remediation guidance. Users should monitor NVIDIA's official channels for driver updates addressing this issue. Until a fix is available, limiting local user access and avoiding untrusted code execution on affected systems may reduce risk.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- nvidia
- Date Reserved
- 2026-01-21T19:09:34.080Z
- Cvss Version
- 3.1
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 6a15e037891d628fdc67d8a4
Added to database: 5/26/2026, 6:02:31 PM
Last enriched: 5/26/2026, 6:33:05 PM
Last updated: 5/26/2026, 9:53:01 PM
Views: 4
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.