7.5Alta
CVE-2026-24184
Descripción
NVIDIA Cumulus Linux contains a vulnerability in the Link Layer Discovery Protocol (LLDP) daemon component, where an unauthenticated attacker on an adjacent network could cause buffer overflow by sending crafted LLDP frames. A successful exploit of this vulnerability might lead to code execution.
Debilidad (CWE):
CWE-120
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
Productos y versiones afectados
| Fabricante | Producto | Versiones | |
|---|---|---|---|
| nvidia | cumulus linux | ≤ 5.11.5 | |
| NVIDIA | Cumulus Linux GA | 0.0 to 5.16 | |
| NVIDIA | Cumulus Linux LTS | 0.0 to 5.11.5 |
Referencias y parches
- https://nvd.nist.gov/vuln/detail/CVE-2026-24184 US Government Resource
- https://www.cve.org/CVERecord?id=CVE-2026-24184 Third Party Advisory
- https://github.com/NVIDIA/product-security/tree/main/2026/5817 Patch
Coincidencias CPE (NVD) (2)
cpe:2.3:o:nvidia:cumulus_linux:*:*:*:*:lts:*:*:*≤ 5.11.5cpe:2.3:o:nvidia:cumulus_linux:*:*:*:*:-:*:*:*≤ 5.16.0