CVE-2026-24184

EUVD-2026-61104
NVIDIA Cumulus Linux contains a vulnerability in the Link Layer Discovery Protocol (LLDP) daemon component, where an unauthenticated attacker on an adjacent network could cause buffer overflow by sending crafted LLDP frames. A successful exploit of this vulnerability might lead to code execution.
Classic Buffer Overflow
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 HIGH
ADJACENT_NETWORK
HIGH
NONE
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 21.95%
Affected Products (NVD)
VendorProductVersion
nvidiacumulus_linux
𝑥
≤ 5.11.5
nvidiacumulus_linux
𝑥
≤ 5.16.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://github.com/NVIDIA/product-security/tree/main/2026/5817
https://nvd.nist.gov/vuln/detail/CVE-2026-24184
https://www.cve.org/CVERecord?id=CVE-2026-24184