NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause improper control of dynamically managed code resources. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, and information disclosure.
Fix
Vendor advisories in the News 1
- ZDI-26-594: NVIDIA Megatron Bridge load_model_config Code Injection Remote Code Execution Vulnerability Zero Day Initiative: published advisories · 2026-08-24
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 7.8 · nvidiaNVD modified 2026-10-25 17:10
Affected (CPE criteria) 1
cpe:2.3:a:nvidia:nemo_megatron_bridge:*:*:*:*:*:*:*:*
References 3
- https://github.com/NVIDIA/product-security/tree/main/2026/5841 Product
- https://nvd.nist.gov/vuln/detail/CVE-2026-24251 Third Party Advisory, US Government Resource
- https://www.cve.org/CVERecord?id=CVE-2026-24251 Third Party Advisory