VulnSocial

CVE-2026-24252Disclosure(linux / linux_kernel)

LOWCVSS 7.8 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Patch linux linux_kernel systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

NVIDIA NeMo for Linux contains a vulnerability where an attacker may cause OS command injection. A successful exploit of this vulnerability may lead to code execution, data tampering, escalation of privileges and information disclosure.

linux CVEsBack to dashboard
1.0/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-78

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • linux_kernel
  • nemo

Threat summary

  • Patch or workaround signal is available
  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 3 signals
  • Disclosure: 2 classified signals
  • Peaked at 2 mentions on most recent observed day (2026-07-27)
  • 3 total mentions across 2 days

Affected systems

Vendors
linuxnvidia
Products
linux_kernelnemo

1 version affected across 2 products

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-06-17: 1Mentions · 2026-07-27: 2Patch / Workaround · 2026-06-17: 1Technical Details · 2026-06-17: 1Technical Details · 2026-07-27: 206-1707-27
Signal classification2 categories
Disclosure
266.7%
Patch
133.3%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-06-171
Patch1
2026-07-272
Disclosure2
Full discourse3 posts
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-24252 NVIDIA NeMo for Linux contains a vulnerability where an attacker may cause OS command injection. A successful exploit of this vulnerability may lead to code execution… https://www.cve.org/CVERecord?id=CVE-2026-24252 ----- Traducción: CVE-2026-24252 NVI… http://infoflow.cloud`

    Post summary

    The post announces CVE-2026-24252, describing an OS command injection flaw that could lead to code execution, but provides no PoC, exploit details or evidence of active use.

    0000036
    95 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-24252 NVIDIA NeMo for Linux contains a vulnerability where an attacker may cause OS command injection. A successful exploit of this vulnerability may lead to code execution… https://www.cve.org/CVERecord?id=CVE-2026-24252

    Post summary

    The post discloses that CVE-2026-24252 is an OS command injection vulnerability in NVIDIA NeMo for Linux that could lead to code execution, with a link to the CVE record.

    00000814
    57.9K followersView on X
  • Daily CyberSecurity@the_yellow_fall
    Patch

    Three NVIDIA NeMo vulnerabilities (CVE-2026-24155, CVE-2026-24252, CVE-2026-24228) enable code execution. Update NeMo Framework to v2.7.3 now. #NVIDIA #NeMo #CVE202624155 #AISecurity #InfoSec https://securityonline.info/nvidia-nemo-vulnerabilities https://t.co/93wJfksSbS

    Post summary

    NVIDIA announces that three NeMo CVEs allow code execution and recommends updating to v2.7.3, highlighting the availability of a patch.

    00000297
    12.3K followersView on X
CPE platform detail2 entries

2 of 2 entries

PartVendorProductVersionTarget SWTarget HW
OSlinuxlinux_kernel---
Appnvidianemo---

Explore more

Back to dashboardlinux CVEsnvidia CVEslinux_kernel vulnerabilities