CVE-2026-47552
nvidia-driver: nvidia-driver: Privilege escalation via authorization check bypass
Severity
ImportantRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · October 1, 2026
Updated · October 31, 2026
Description
A flaw was found in nvidia-driver. An unprivileged local user can bypass an authorization check in the kernel mode layer to modify privileged configurations. Successful exploitation could allow an attacker to escalate privileges, execute arbitrary code, access sensitive information, or cause a denial of service (DoS).
Statement
This vulnerability is rated Important because an authenticated local attacker can circumvent authorization routines within the kernel display driver to alter privileged settings, enabling complete system compromise including elevated privileges and service disruption. To execute this attack, a malicious actor must already have local shell access to a system operating with the affected NVIDIA graphics driver. Red Hat Enterprise Linux is not affected by this flaw because the vulnerable code is not included in supported driver offerings.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-862 · Missing Authorization