CVE Database›Document archive›CVE-2026-47548

CVE-2026-47548

nvidia-driver: nvidia-driver: Arbitrary code execution via out-of-bounds write in kernel mode layer

Loading…

Severity

Important

Red Hat Product Security

7.8

CVSS 3.1

Review impact separately from score.

Published · October 1, 2026

Updated · October 17, 2026

Description

A flaw was found in the NVIDIA GPU display driver. A local user can exploit an out-of-bounds write vulnerability within the kernel mode layer to corrupt system memory. Successful exploitation could allow an attacker to achieve arbitrary code execution with elevated kernel privileges, trigger a Denial of Service (DoS) by crashing the system, modify data, or disclose sensitive information.

Statement

Red Hat rates the impact of this vulnerability as Important rather than Moderate because a local authenticated user could corrupt kernel-space memory, resulting in complete system compromise or an unrecoverable system crash. Exploitation requires direct local execution privileges on a host equipped with affected NVIDIA graphics hardware and proprietary drivers, preventing remote or unauthenticated exploitation. Default Red Hat Enterprise Linux installations are not affected as the shipped driver packages do not contain the vulnerable code.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 7.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-787 · Out-of-bounds Write