CVE-2026-47548
nvidia-driver: nvidia-driver: Arbitrary code execution via out-of-bounds write in kernel mode layer
Severity
ImportantRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · October 1, 2026
Updated · October 17, 2026
Description
A flaw was found in the NVIDIA GPU display driver. A local user can exploit an out-of-bounds write vulnerability within the kernel mode layer to corrupt system memory. Successful exploitation could allow an attacker to achieve arbitrary code execution with elevated kernel privileges, trigger a Denial of Service (DoS) by crashing the system, modify data, or disclose sensitive information.
Statement
Red Hat rates the impact of this vulnerability as Important rather than Moderate because a local authenticated user could corrupt kernel-space memory, resulting in complete system compromise or an unrecoverable system crash. Exploitation requires direct local execution privileges on a host equipped with affected NVIDIA graphics hardware and proprietary drivers, preventing remote or unauthenticated exploitation. Default Red Hat Enterprise Linux installations are not affected as the shipped driver packages do not contain the vulnerable code.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-787 · Out-of-bounds Write