CVE Database›Document archive›CVE-2026-47505

CVE-2026-47505

nvidia-driver: nvidia-driver: Arbitrary code execution via use-after-free in kernel mode layer

Loading…

Severity

Important

Red Hat Product Security

7.8

CVSS 3.1

Review impact separately from score.

Published · October 1, 2026

Updated · October 17, 2026

Description

A flaw was found in nvidia-driver. A local user can exploit a use-after-free condition in the kernel mode layer, which occurs when memory is improperly accessed after it has been released. A successful exploit could allow an attacker to achieve arbitrary code execution, privilege escalation, Denial of Service (DoS), information disclosure, or unauthorized data modification.

Statement

This vulnerability is rated as Important due to the potential for local unprivileged users to trigger memory corruption and achieve arbitrary code execution or cause kernel-level denial of service. However, Red Hat Enterprise Linux products are not affected by this flaw because it specifically resides in the kernel mode layer of the NVIDIA display driver for Windows. The vulnerable implementation is not present in the Linux driver packages distributed by Red Hat.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 7.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-825 · Expired Pointer Dereference