CVE-2026-47507

A flaw was found in nvidia-driver. A local user can trigger an out-of-bounds array access in the driver's kernel mode layer. This vulnerability could allow an attacker to escalate privileges, execute arbitrary code, cause a denial of service (DoS), or access and modify sensitive system data.

This vulnerability is rated as an Important severity issue because an authenticated local attacker can leverage out-of-bounds memory access within the driver to achieve kernel-level privilege escalation and full host compromise. Exploitation requires specialized physical hardware, limiting the attack surface strictly to hosts running proprietary NVIDIA GPU drivers with accessible device nodes. Standard Red Hat Enterprise Linux installations lacking NVIDIA hardware or operating exclusively with default open-source graphics stacks are not affected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.