CVE-2024-35862: linux-nvidia-tegra-igx vulnerabilities
Affects Linux kernelSource GCVE Database
Mentioned vulnerabilities
Not known to be exploited : upgrade to 5.15.0-1049.49 when convenient.
Data as of 29 Oct 2026, 22:33 UTC
Rated by Threat Radar · No CVSS score from NVD or the CNA
- Patch
- Available – fixed in 5.15.0-1049.49
Exploitation evidence
Disclosed: evidence found.
CVE published 25 May 2026
Detectable: no evidence on record.
No public nuclei template indexed
Weaponized: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 29 Oct 2026.
What to do
Upgrade the Ubuntu linux-nvidia-tegra-igx package to 5.15.0-1049.49.
Patches and advisories
Affected software
| Product | Affected | Fixed in |
|---|---|---|
Ubuntu 22.04 LTSlinux-nvidia-tegra-igxpkg:deb/ubuntu/linux-nvidia-tegra-igx?arch=source&distro=jammyOther threats | Affected
| Fixed in
|
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
Description
It was discovered that the Linux kernel algif_aead module did not properly handle in-place cryptographic operations. This flaw is known as Copy Fail. A local attacker could use this to escalate privileges, or possibly escape a container. (CVE-2026-31431) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - Ethernet bonding driver; - SMB network file system; - Netfilter; - io_uring subsystem; - Packet sockets; - TLS protocol; (CVE-2024-35862, CVE-2024-50060, CVE-2026-23274, CVE-2026-23351, CVE-2026-31419, CVE-2026-31504, CVE-2026-31533, CVE-2026-43033, CVE-2026-43077, CVE-2026-43078)
References
- ubuntu.com/security/notices/USN-8279-3 (opens in a new tab)
- ubuntu.com/security/CVE-2024-35862 (opens in a new tab)
- ubuntu.com/security/CVE-2024-50060 (opens in a new tab)
- ubuntu.com/security/CVE-2026-23274 (opens in a new tab)
- ubuntu.com/security/CVE-2026-23351 (opens in a new tab)
- ubuntu.com/security/CVE-2026-31419 (opens in a new tab)
- ubuntu.com/security/CVE-2026-31431 (opens in a new tab)
- ubuntu.com/security/CVE-2026-31504 (opens in a new tab)
- ubuntu.com/security/CVE-2026-31533 (opens in a new tab)
- ubuntu.com/security/CVE-2026-43033 (opens in a new tab)
- ubuntu.com/security/CVE-2026-43077 (opens in a new tab)
- ubuntu.com/security/CVE-2026-43078 (opens in a new tab)