CVE-2026-47527

A flaw was found in the NVIDIA GPU display driver. An authenticated local attacker with high privileges can trigger an out-of-bounds read vulnerability in the device firmware. Successful exploitation may lead to arbitrary code execution, denial of service (DoS), privilege escalation, or unauthorized information disclosure.

Red Hat Product Security rates this vulnerability as having a Moderate severity because exploitation requires local access with elevated administrative privileges on the target system. In typical Red Hat Enterprise Linux environments, the NVIDIA driver is deployed on systems utilizing dedicated GPU acceleration, where an attacker must already possess high-level privileges to interact directly with the underlying graphics hardware firmware. Although potential firmware memory manipulation could lead to host instability, execution of unauthorized code, or data leakage, the high privilege prerequisite substantially mitigates the threat against standard multi-tenant or default installations.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Prevent the NVIDIA kernel driver module from loading if dedicated GPU acceleration is not required on the system.

1. Blacklist the module by creating a configuration file:

echo "install nvidia /bin/true" > /etc/modprobe.d/disable-nvidia.conf

2. If the module is currently loaded, ensure all GPU-dependent processes are terminated, or restart the system.

Warning: Disabling this module prevents NVIDIA GPU acceleration, display output, and CUDA compute workloads. A system restart is required to completely unload the driver if it is currently in use.