CVE-2026-47509

A flaw was found in the NVIDIA GPU display driver. A local user with elevated privileges can trigger an out-of-bounds write (writing data past intended memory buffer limits) within the kernel mode layer. A successful exploit could allow the attacker to achieve arbitrary code execution, escalate privileges, cause a Denial of Service (DoS), or tamper with system data.

Red Hat Product Security rates this vulnerability as Moderate because successful exploitation requires local host access with elevated, administrative privileges. While memory corruption within the kernel driver could result in denial of service or arbitrary code execution, an attacker must already possess root-level authorization to trigger the flaw. This prerequisite substantially limits the risk of direct privilege escalation from unprivileged local accounts or remote threats.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Prevent the NVIDIA kernel module from loading by blacklisting it in the modprobe configuration:

1. Add the module to the blacklist configuration:

echo "blacklist nvidia" >> /etc/modprobe.d/blacklist-nvidia.conf

2. Prevent the module from loading by defining an install rule:

echo "install nvidia /bin/false" >> /etc/modprobe.d/blacklist-nvidia.conf

3. Restart the system to unload the driver and apply changes:

systemctl reboot

Caveats: A system restart is required to ensure the module is completely unloaded from the running kernel. Applying this configuration disables NVIDIA GPU functionality, including hardware graphics acceleration and compute workloads.