CVE-2026-47513

A flaw was found in the NVIDIA GPU display driver (nvidia-driver). A vulnerability in the kernel mode layer allows a local user to trigger an out-of-bounds read from kernel heap memory. A successful exploit could enable an attacker to achieve arbitrary code execution, escalate privileges, cause a Denial of Service (DoS), or access sensitive information.

This vulnerability is rated as having an Important impact because an authenticated local user can abuse the kernel-mode driver to execute code with kernel-level authority, elevate privileges, or crash the host operating system. The risk is designated as Important rather than Critical because exploitation is bounded by local access constraints and cannot be initiated across the network. Triggering the flaw requires physical or virtualized systems equipped with NVIDIA acceleration hardware and the proprietary driver actively loaded. Standard Red Hat Enterprise Linux environments operating without NVIDIA hardware or running open-source alternatives are not affected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.