CVE-2026-47512

A flaw was found in the NVIDIA GPU display driver. A local user can trigger an out-of-bounds read within the kernel mode layer to access sensitive kernel memory. This flaw may allow an attacker to escalate privileges, execute arbitrary code, cause a Denial of Service (DoS), or tamper with system data.

This vulnerability is rated as Important because an authenticated local user can achieve elevated kernel privileges or compromise system availability, although exploitation requires local access. Red Hat Enterprise Linux systems are not vulnerable in default configurations, which rely on open-source display drivers. Risk is confined to environments where proprietary NVIDIA driver packages have been explicitly deployed and loaded for specialized graphics or accelerated compute workloads.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Prevent the NVIDIA kernel driver module from loading on systems where GPU acceleration is not strictly required.

To prevent the driver from loading, add the module to the modprobe blacklist configuration:

echo "blacklist nvidia" > /etc/modprobe.d/blacklist-nvidia.conf

echo "install nvidia /bin/false" >> /etc/modprobe.d/blacklist-nvidia.conf

Caveats: Disabling the NVIDIA kernel module prevents GPU acceleration, CUDA or high-performance compute workloads, and display output managed by the proprietary driver.

Warning: A system reboot is required for this configuration to take effect and ensure the active module is unloaded from kernel memory.