CVE-2026-47553

A flaw was found in nvidia-driver. An unprivileged local user can trigger an out-of-bounds write vulnerability in the driver's kernel mode layer, corrupting memory outside designated boundaries. A successful exploit could allow the attacker to achieve privilege escalation, execute arbitrary code, or cause a denial of service (DoS).

This flaw is rated as Important severity because an authenticated local attacker with minimal privileges could exploit memory corruption within the kernel driver to gain elevated system privileges or destabilize the host operating system. Red Hat Enterprise Linux does not ship or enable proprietary NVIDIA display drivers in standard default installations, restricting potential exposure to specialized environments where these proprietary kernel modules have been explicitly installed for GPU workloads. Exploitation is confined to local system users interacting directly with the underlying graphics hardware interface, precluding remote or unauthenticated exploitation.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.