CVE-2026-24153
Medium · 5.2CVSS
5.2
EPSS
0.1%
Published
Mar 31, 2026
CISA due date
—
The record
NVIDIA Jetson Linux has a vulnerability in initrd, where the nvluks trusted application is not disabled. A successful exploit of this vulnerability might lead to information disclosure.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-65902 DOMPurify before 3.4.7 (affected versions <= 3.4.5) passes direct references to the… CWE-501
- GHSA-76mc-f452-cxcm DOMPurify: Hook mutation of `data.allowedTags` / `data.allowedAttributes` permanently… CWE-501
- GHSA-hpcv-96wg-7vj8 DOMPurify: Cross-realm IN_PLACE sanitization leaves executable markup intact via… CWE-501
- CVE-2026-33828 Trust boundary violation in Windows Attestation allows an authorized attacker to elevate… CWE-501
- GHSA-f26g-jm89-4g65 gitoxide: CommandForbiddenInModulesConfiguration Bypass in gix_submodule::File::update()… CWE-501
- GHSA-jf56-mccx-5f3f OpenClaw: Authenticated `/hooks/wake` and mapped `wake` payloads are promoted into the… CWE-501
- GHSA-gfmx-pph7-g46x OpenClaw: Lower-trust background runtime output is injected into trusted `System:`… CWE-501
- GHSA-ff64-7w26-62rf Claude Code has Sandbox Escape via Persistent Configuration Injection in settings.json CWE-501