CVE-2026-47510
nvidia-driver: nvidia-driver: Arbitrary code execution via integer overflow in kernel mode layer
Severity
ImportantRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · October 1, 2026
Updated · November 5, 2026
Description
A flaw was found in the NVIDIA GPU display driver. A local user can trigger an integer overflow in the kernel mode layer, leading to an out-of-bounds write to graphics processing unit (GPU) memory. A successful exploit could allow an attacker to execute arbitrary code, escalate privileges, cause a denial of service (DoS), or disclose sensitive information.
Statement
This vulnerability is rated as Important because an authenticated local user can trigger an integer overflow in the kernel-level driver to corrupt GPU memory, potentially achieving elevated privileges or causing a denial of service. The impact is limited to Important rather than Critical because exploitation cannot occur remotely and requires local execution privileges on systems equipped with NVIDIA graphics hardware. Deployments without NVIDIA GPUs or environments where the proprietary driver module is not loaded remain unaffected by this flaw.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-787 · Out-of-bounds Write