High · 7.5 CVE-2026-24184 EUVD-2026-61104GHSA-577q-25hp-pjhg

NVIDIA Cumulus Linux contains a vulnerability in the Link Layer Discovery Protocol (LLDP) daemon component, where an unauthenticated attack…

Published Aug 18, 2026 · Updated Aug 18, 2026 · Assigned by nvidia

Vendor: NVIDIA Product: Cumulus Linux GA Product: Cumulus Linux LTS Platform: Linux

Description

NVIDIA Cumulus Linux contains a vulnerability in the Link Layer Discovery Protocol (LLDP) daemon component, where an unauthenticated attacker on an adjacent network could cause buffer overflow by sending crafted LLDP frames. A successful exploit of this vulnerability might lead to code execution.

Affected products

Vendor	Product	Affected	Fixed
NVIDIA	Cumulus Linux GA	0.0 to 5.16	—
NVIDIA	Cumulus Linux LTS	0.0 to 5.11.5, 0.0 to 5.9.5	—

Advisories 1

WID-SEC-2026-2922 Nvidia Cumulus Linux: Mehrere Schwachstellen BSI CERT-Bund (WID) · Aug 18, 2026

References

https://nvd.nist.gov/vuln/detail/CVE-2026-24184
https://www.cve.org/CVERecord?id=CVE-2026-24184
https://github.com/NVIDIA/product-security/tree/main/2026/5817