CVE-2026-47524

A flaw was found in the NVIDIA GPU display driver. A local attacker with high privileges can trigger an out-of-bounds read in the kernel mode layer. Successful exploitation could lead to arbitrary code execution, privilege escalation, a Denial of Service (DoS), or information disclosure.

This vulnerability is rated as having Moderate impact on Red Hat Enterprise Linux because exploitation requires existing high administrative privileges on the local host. On Red Hat systems, the proprietary NVIDIA driver is only deployed on installations equipped with supported GPU hardware and is not part of default base installations. While successful exploitation within the kernel module layer could result in code execution or a denial of service, the prerequisite for elevated permissions significantly limits the exposure to untrusted users.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Prevent autoloading of the NVIDIA driver kernel module by creating a modprobe configuration rule:

1. Blacklist the kernel module:

echo "blacklist nvidia" > /etc/modprobe.d/blacklist-nvidia.conf

echo "install nvidia /bin/false" >> /etc/modprobe.d/blacklist-nvidia.conf

2. If the module is currently loaded, unload it:

modprobe -r nvidia

Warning: Unloading the driver or applying these changes may require stopping active display managers or rebooting the system if the driver is currently in use.

Caveats: Disabling the NVIDIA kernel module prevents proprietary GPU hardware acceleration, graphical desktop sessions relying on the driver, and CUDA compute workloads.