CVE-2026-47537

A flaw was found in the NVIDIA GPU display driver. An out-of-bounds write vulnerability in the kernel mode layer allows a local privileged attacker to corrupt system memory. Successful exploitation can lead to arbitrary code execution, privilege escalation, or a Denial of Service (DoS), as well as unauthorized data tampering and information disclosure.

In Red Hat Enterprise Linux environments, this vulnerability is evaluated as a Moderate impact because exploitation requires local access with pre-existing administrative privileges. The proprietary NVIDIA driver is not installed by default and is only deployed on systems equipped with specialized GPU hardware. While kernel memory corruption could cause system instability or code execution, the requirement for high privileges limits the overall risk to typical deployments.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Prevent the NVIDIA driver kernel module from loading by adding a modprobe configuration entry:

1. Create a configuration file to blacklist the driver:

echo "blacklist nvidia" > /etc/modprobe.d/blacklist-nvidia.conf

echo "install nvidia /bin/true" >> /etc/modprobe.d/blacklist-nvidia.conf

2. If the module is currently loaded, unload it:

modprobe -r nvidia

Warning: If the module is actively in use by graphical or compute processes, unloading it directly may fail and a complete system restart will be required to apply the change. Disabling the driver will disable NVIDIA GPU hardware acceleration, proprietary display rendering, and GPU computing tasks (such as CUDA).