CVE-2026-47526

A flaw was found in the NVIDIA GPU Display Driver. A local attacker with administrative privileges can trigger a null pointer dereference vulnerability within the driver firmware. Successful exploitation may lead to a Denial of Service (DoS) by causing the system or graphics subsystem to crash.

This vulnerability is rated as Moderate severity rather than Important because exploitation requires local access with elevated administrative privileges, limiting the blast radius to a denial of service on an already privileged system. On Red Hat Enterprise Linux systems utilizing proprietary NVIDIA GPU drivers, an attacker who has already obtained root permissions could trigger a crash within the graphics firmware subsystem. Because elevated privileges are already a prerequisite to interact with the vulnerable firmware interface, the defect cannot be leveraged for privilege escalation or unauthorized data disclosure.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Prevent the NVIDIA kernel module from loading by configuring modprobe rules:

1. Create a configuration file to blacklist the driver and disable autoloading:

echo "blacklist nvidia" >> /etc/modprobe.d/disable-nvidia.conf
echo "install nvidia /bin/true" >> /etc/modprobe.d/disable-nvidia.conf

2. If the kernel module is currently active, a system reboot is required to unload it:

reboot

Warning and Caveats: A reboot is required to unload the driver if it is currently in memory. Preventing this module from loading disables NVIDIA GPU hardware acceleration, proprietary display rendering, and GPU compute capabilities, which will disrupt graphical sessions and any workloads reliant on the GPU.