CVE Database›Document archive›CVE-2026-47510

CVE-2026-47510

nvidia-driver: nvidia-driver: Arbitrary code execution via integer overflow in kernel mode layer

Loading…

Severity

Important

Red Hat Product Security

7.8

CVSS 3.1

Review impact separately from score.

Published · October 1, 2026

Updated · November 5, 2026

Description

A flaw was found in the NVIDIA GPU display driver. A local user can trigger an integer overflow in the kernel mode layer, leading to an out-of-bounds write to graphics processing unit (GPU) memory. A successful exploit could allow an attacker to execute arbitrary code, escalate privileges, cause a denial of service (DoS), or disclose sensitive information.

Statement

This vulnerability is rated as Important because an authenticated local user can trigger an integer overflow in the kernel-level driver to corrupt GPU memory, potentially achieving elevated privileges or causing a denial of service. The impact is limited to Important rather than Critical because exploitation cannot occur remotely and requires local execution privileges on systems equipped with NVIDIA graphics hardware. Deployments without NVIDIA GPUs or environments where the proprietary driver module is not loaded remain unaffected by this flaw.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 7.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-787 · Out-of-bounds Write