CVE-2026-47529

A flaw was found in the NVIDIA GPU display driver. A local attacker with administrative privileges can trigger an out-of-bounds write in the driver's kernel mode layer. Successful exploitation could lead to arbitrary code execution, privilege escalation, data tampering, information disclosure, or a denial of service (DoS).

This vulnerability is rated as Moderate for Red Hat Enterprise Linux because exploitation requires local access and elevated administrative privileges, limiting the risk of unauthorized access from unprivileged accounts. The proprietary NVIDIA GPU driver packages are optional components rather than default system packages, requiring deliberate installation for specialized compute or graphical environments. While memory corruption within kernel space can destabilize the operating system, an attacker already possessing root-level access holds extensive administrative control over the host environment.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this flaw, prevent the proprietary kernel driver from loading by blacklisting it in the modprobe configuration:

1. Create a configuration file to disable autoloading:

echo "blacklist nvidia" > /etc/modprobe.d/blacklist-nvidia.conf
echo "install nvidia /bin/true" >> /etc/modprobe.d/blacklist-nvidia.conf

2. If the module is already loaded, attempt to unload it:

modprobe -r nvidia

Caveats: Preventing the driver from loading disables NVIDIA GPU acceleration, display output relying on the proprietary driver, and GPU computing workloads such as CUDA.

Warning: If the module is actively in use by graphical sessions or background computing processes, it cannot be unloaded dynamically and the system must be rebooted for the configuration to take effect.