CVE-2026-47528

A flaw was found in the NVIDIA GPU Display Driver. A local attacker with standard user access can trigger the driver firmware to access an uninitialized memory pointer. Successful exploitation could allow the attacker to execute arbitrary code, escalate system privileges, tamper with data, access sensitive information, or cause a denial of service (DoS).

Red Hat has evaluated this vulnerability as an Important severity impact because standard local users can manipulate driver firmware interactions to achieve complete privilege escalation and arbitrary code execution within the host system. The proprietary NVIDIA display driver is not enabled by default across standard installations and is specifically deployed on systems provisioned with dedicated GPU hardware for graphics or compute workloads. Because network-based vectors are absent, direct local access or prior shell execution privileges on an affected host are mandatory preconditions to interact with the device interfaces.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.