CVE Database›Document archive›CVE-2026-47551

CVE-2026-47551

nvidia-driver: nvidia-driver: Arbitrary code execution via kernel-mode use-after-free

Loading…

Severity

Important

Red Hat Product Security

7.8

CVSS 3.1

Review impact separately from score.

Published · October 1, 2026

Updated · October 17, 2026

Description

A flaw was found in the NVIDIA GPU Display Driver. A local user can trigger a use-after-free condition in the kernel-mode driver layer, where previously freed memory is improperly referenced. A successful exploit could allow an attacker to achieve arbitrary code execution, escalate privileges, cause a denial of service (DoS), or expose sensitive information.

Statement

This vulnerability is evaluated as Important because an authenticated local user can exploit a kernel-level use-after-free flaw to execute arbitrary code with elevated system privileges. While the potential blast radius involves complete compromise of kernel integrity and host availability, exploitation is constrained by requiring local access to a system configured with proprietary NVIDIA graphics hardware. Red Hat Enterprise Linux releases are not affected by this flaw because the vulnerable code is not present in shipped packages.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 7.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-825 · Expired Pointer Dereference