Reversing NVIDIA’s CVE-2026-24190: How a Kernel Flaw Put Enterprise AI Clusters and Workstations at Risk

This report performs a differential reverse-engineering analysis of two NVIDIA Windows kernel driver builds (vulnerable Build 596.21 and patched Build 596.36), identifying multiple security fixes (including CVE-2026-24190 and CVE-2026-24182) that remediate kernel-level input validation failures, pointer-slot collisions enabling privilege escalation, and an ERESOURCE lock leak causing denial-of-service; it explains the technical vulnerability mechanics, the exact patches (signature gate 0x240d, index masking, multi-flag lifecycle checks, and cleanup wrappers), and provides enterprise mitigation recommendations such as immediate driver updates, blocklisting legacy drivers, IOCTL telemetry, and container access restrictions.