CVE-2026-47551
nvidia-driver: nvidia-driver: Arbitrary code execution via kernel-mode use-after-free
Severity
ImportantRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · October 1, 2026
Updated · October 17, 2026
Description
A flaw was found in the NVIDIA GPU Display Driver. A local user can trigger a use-after-free condition in the kernel-mode driver layer, where previously freed memory is improperly referenced. A successful exploit could allow an attacker to achieve arbitrary code execution, escalate privileges, cause a denial of service (DoS), or expose sensitive information.
Statement
This vulnerability is evaluated as Important because an authenticated local user can exploit a kernel-level use-after-free flaw to execute arbitrary code with elevated system privileges. While the potential blast radius involves complete compromise of kernel integrity and host availability, exploitation is constrained by requiring local access to a system configured with proprietary NVIDIA graphics hardware. Red Hat Enterprise Linux releases are not affected by this flaw because the vulnerable code is not present in shipped packages.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-825 · Expired Pointer Dereference