CVE-2026-47540
nvidia-driver: nvidia-driver: Arbitrary code execution via integer underflow in the kernel mode layer
Severity
ImportantRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · October 1, 2026
Updated · October 17, 2026
Description
A flaw was found in the NVIDIA GPU Display Driver. An integer underflow vulnerability exists in the driver's kernel mode layer, occurring when an arithmetic calculation results in a value smaller than the minimum representable limit. A local attacker with low-level privileges can exploit this flaw to execute arbitrary code, escalate privileges, trigger a Denial of Service (DoS), access sensitive information, or tamper with system data.
Statement
This vulnerability is rated as having Important impact because an authenticated local user can trigger an arithmetic underflow within the GPU kernel mode driver, potentially achieving elevated kernel privileges and system takeover. The risk is elevated due to the absence of required user interaction, though exploitation remains bounded to attackers who already possess local host access. Red Hat Enterprise Linux environments are not affected, as the distributed packages do not incorporate the vulnerable driver code.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-191 · Integer Underflow (Wrap or Wraparound)