CVE-2026-47515

A flaw was found in the NVIDIA GPU display driver. A local user with elevated privileges can trigger an unbounded string operation within the kernel mode layer, causing an out-of-bounds memory read. Successful exploitation could allow the attacker to execute arbitrary code, escalate privileges, cause a denial of service (DoS), or access sensitive information.

This vulnerability is rated as Moderate severity for Red Hat Enterprise Linux because exploitation requires local access and elevated administrative privileges to interact with the kernel-mode driver interface. On systems utilizing NVIDIA GPU hardware with proprietary drivers installed, an attacker with high privileges could leverage this issue to trigger memory corruption within the kernel space, potentially achieving arbitrary code execution or a denial of service. Systems without NVIDIA hardware or those using native open-source drivers (such as nouveau) do not load this kernel driver and remain unaffected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Prevent loading of the NVIDIA kernel module by blacklisting it in the modprobe configuration.

1. Create a configuration file to prevent the module from loading:

echo 'install nvidia /bin/true' > /etc/modprobe.d/disable-nvidia.conf

2. If the module is currently loaded, unload it or reboot the system:

modprobe -r nvidia

Caveats: Disabling this module prevents NVIDIA GPU acceleration, display output, and CUDA workloads from functioning on affected hardware. A system reboot or service reload may be required for changes to take effect if dependent services are using the driver.