CVE-2026-47545
nvidia-driver: nvidia-driver: Privilege escalation via kernel-mode out-of-bounds read
Severity
ImportantRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · October 1, 2026
Updated · October 17, 2026
Description
A flaw was found in the NVIDIA GPU Display Driver. A local user with basic privileges can exploit an out-of-bounds read vulnerability in the driver's kernel-mode layer. A successful exploit could allow the attacker to execute arbitrary code with elevated privileges, access or tamper with sensitive information, or trigger a denial of service (DoS) by causing a system crash.
Statement
Red Hat has rated this vulnerability as Important because an authenticated local user could trigger an out-of-bounds read within the kernel-mode driver, potentially resulting in elevated privileges, host code execution, or a system denial of service. Red Hat Enterprise Linux releases are not affected because the packaged driver builds do not contain the vulnerable code. In deployments utilizing affected driver releases, exploitation requires local system access with permissions to communicate with the NVIDIA kernel module and underlying GPU hardware.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-125 · Out-of-bounds Read