CVE-2026-47500

A flaw was found in nvidia-driver. The kernel mode layer fails to properly clean up memory reference counts during error recovery paths, leading to a use-after-free condition where memory is accessed after it has been released. A local attacker with standard user privileges could exploit this flaw to execute arbitrary code, escalate privileges, or cause a denial of service (DoS).

This vulnerability is rated as Important severity because an unprivileged local user could leverage kernel-level memory corruption to gain root privileges, compromise host integrity, or trigger an unrecoverable system crash. Exploitation requires access to a system configured with affected NVIDIA graphics hardware and active proprietary driver modules. Red Hat Enterprise Linux environments are not affected as the vulnerable code is not present in supported package builds.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.