CVE-2026-47530

A flaw was found in nvidia-driver. A local user with standard privileges can trigger an out-of-bounds memory write within the driver's kernel-mode layer. Successful exploitation could allow an attacker to execute arbitrary code, escalate privileges, tamper with sensitive data, or cause a denial of service (DoS) by crashing the operating system.

This vulnerability is rated as an Important severity flaw because an authenticated local user with access to GPU device interfaces can trigger memory corruption in kernel space, potentially elevating privileges to root and fully compromising the host. Exploitation depends on local unprivileged access to an environment where the proprietary driver module is actively loaded on compatible hardware. Red Hat Enterprise Linux packages are not affected as the shipped driver builds do not contain the vulnerable code.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.