CVE Database›Document archive›CVE-2026-47545

CVE-2026-47545

nvidia-driver: nvidia-driver: Privilege escalation via kernel-mode out-of-bounds read

Loading…

Severity

Important

Red Hat Product Security

7.8

CVSS 3.1

Review impact separately from score.

Published · October 1, 2026

Updated · October 17, 2026

Description

A flaw was found in the NVIDIA GPU Display Driver. A local user with basic privileges can exploit an out-of-bounds read vulnerability in the driver's kernel-mode layer. A successful exploit could allow the attacker to execute arbitrary code with elevated privileges, access or tamper with sensitive information, or trigger a denial of service (DoS) by causing a system crash.

Statement

Red Hat has rated this vulnerability as Important because an authenticated local user could trigger an out-of-bounds read within the kernel-mode driver, potentially resulting in elevated privileges, host code execution, or a system denial of service. Red Hat Enterprise Linux releases are not affected because the packaged driver builds do not contain the vulnerable code. In deployments utilizing affected driver releases, exploitation requires local system access with permissions to communicate with the NVIDIA kernel module and underlying GPU hardware.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 7.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-125 · Out-of-bounds Read