NVIDIA GPU Drivers Patch Multiple High Severity Vulnerabilities

NVIDIA released updated GPU drivers on May 21 to patch multiple security vulnerabilities affecting Windows and Linux systems. The update addresses both high and medium severity issues across its consumer and professional graphics product lines.

Updated drivers address kernel mode and data inconsistency flaws.

The high-severity flaws include CVE-2026-24190, which allows unauthorized access to GPU resources in kernel mode. CVE-2026-24191 introduces data inconsistency between check and use operations. CVE-2026-24193 is an out-of-bounds write vulnerability. All three carry risks of denial of service, privilege escalation, information disclosure, data tampering, or code execution.

Medium severity issues include CVE-2026-24182, a driver lock leak that may cause denial of service. CVE-2025-33221 is another kernel driver vulnerability with risks of data tampering and denial of service. GeForce drivers require version 596.36 or 582.53 to resolve these issues. RTX, Quadro, NVS, and Tesla products also need updates to versions 596.36, 582.53, or 539.72.

The vulnerabilities span multiple GPU architectures including Maxwell, Volta, and Pascal. NVIDIA has not confirmed a specific launch window for all affected driver branches.